Skip to content

leHACK Conferences & workshops 📅 iCal

Prototype Pollution and where to find them 🇫🇷

30Jun2023
Time: 14:00 > 14:45
Location: Zone 1 - Gaston Berger conference stage

Prototype pollution is a vulnerability in JavaScript applications that can have varying impacts depending on the complexity and nature of the affected app. It exploits the prototype inheritance feature of JavaScript, which allows objects to inherit properties and methods. By manipulating the prototype chain of an object, an attacker can introduce malicious properties, leading to unexpected behavior and potentially allowing the attacker to execute arbitrary code.

In this talk, we will first give an overview of JavaScript prototypes and prototype pollution attacks. We will then introduce a new tool we have developed to assist ourselves in identifying gadgets by instrumenting the source code. This allows it to aid in whitebox audits, enabling researchers to easily identify vulnerabilities in large codebase. Finally, we will demonstrate how the tool is used during a live demo targeting popular JavaScript libraries. Our goal is to help researchers and developers understand the potential impacts of prototype pollution and learn how to identify and exploit these vulnerabilities in JavaScript applications.

Bitk
Sakiir

More Conferencess

Dernières Nouvelles

OSINT VILLAGE conferences, rumps and workshops

Hey!
We’ve published the OSINT Village lineup.

OSINT is a rising topic in the Hacking community:la collecte, l'analyse et la diffusion d'informations disponibles au public et légalement accessibles.

SEE THE LINEUP

Conferences Timeline published!

We just published the conference lineup.
Workshops, Hardware village and OSINT village coming soon!