Test web app flaws for unwanted code execution.
What it does
Guides escalation of prototype pollution vulnerabilities into verified server-side code execution or client-side script execution.
When to use it
Use after confirming prototype pollution, when seeking code execution or framework-specific exploitation paths.
How to use it
Give it a target web application; it guides confirmation of prototype pollution, selection of a matching exploit, and verification of code or script execution.
What you provide
- the target web application
Latest review
What you need · 1
Requires loading the companion skill first for prototype pollution fundamentals, merge-sink detection, and basic probes.
Access · 2
This skill
target web application
Write
Sends pollution probes to applications
target server
Execute
Exploit code on servers