A Node.js Express application that merges uploaded JSON into its objects with lodash 4.6.1, whose merge lets __proto__ keys reach Object.prototype.
Not startedDockercommit c7f13e0x86_64 · aarch64Secret
Pollute Object.prototype through the merged JSON to change the application's behaviour and gain admin rights (prototype pollution).
The brief for this lab lives in its repository.