July 4, 2023, 4 p.m. | Dana Epp

Security Boulevard securityboulevard.com

Learn how to use server-side prototype pollution (SSPP) to abuse an API written in NodeJS for privilege escalation and remote code execution.


The post How to exploit an API using prototype pollution appeared first on Dana Epp's Blog.


The post How to exploit an API using prototype pollution appeared first on Security Boulevard.

abuse api api hacking techniques blog code code execution epp escalation exploit learn privilege privilege escalation prototype remote code remote code execution security server written

DevSecOps Engineer

@ Material Bank | Remote

Instrumentation & Control Engineer - Cyber Security

@ ASSYSTEM | Bridgwater, United Kingdom

Security Consultant

@ Tenable | MD - Columbia - Headquarters

Management Consultant - Cybersecurity - Internship

@ Wavestone | Hong Kong, Hong Kong

TRANSCOM IGC - Cybersecurity Engineer

@ IT Partners, Inc | St. Louis, Missouri, United States

Manager, Security Operations Engineering (EMEA)

@ GitLab | Remote, EMEA