Prototype Pollution Leads to RCE - Gadgets Everywhere

This course aims to educate participants on the concept of Prototype Pollution vulnerabilities in JavaScript applications, specifically focusing on how these vulnerabilities can lead to Remote Code Execution (RCE). The course covers the identification of gadgets within Node.js core code and popular NPM packages that can be exploited through Prototype Pollution. The teaching method involves in-depth research and analysis of Prototype Pollution beyond Denial of Service (DoS) attacks. This course is intended for individuals interested in cybersecurity, particularly those looking to enhance their understanding of advanced vulnerabilities in web applications.