---
id: 4888
title: "Server side prototype pollution, how to detect and exploit"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/server-side-prototype-pollution-how-to-detect-and-exploit"
published_at: "2023-02-15T16:19:00Z"
tags: ["bug-bounty", "vulnerability-research", "web-security", "prototype-pollution", "exploitation", "javascript", "nodejs"]
phying_url: "https://phying.com/item/4888"
lang: en
---

# Server side prototype pollution, how to detect and exploit

## Summary

Server-side prototype pollution in JavaScript: how prototypes work, how to detect vulnerable targets in black-box testing, and gadget hunting in libraries such as Express, Fastify and Axios.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2023-02-15T16:19:00Z
- **Original:** https://www.yeswehack.com/learn-bug-bounty/server-side-prototype-pollution-how-to-detect-and-exploit
- **Phying News:** https://phying.com/item/4888