Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-26. Prototype Pollution in User Profile Manager
Mission
In this Node.js/Express app, a logged-in user can update their own profile. Check whether the recursive merge function used for updates properly filters out special keys.
Hints
Hint 1 Show
__proto__ can sometimes be used to pollute an object's prototype
Hint 2 Show
Try sending a JSON body with isAdmin: true nested under a __proto__ key
Hint 3 Show
Also pay attention to the admin-only endpoint /api/admin