Master Prototype Pollution: Solve TJCTF 2022 Fruit Store Challenge 🔧

In this short video I'm showing how to solve Prototype Pollution challenges, explaining how to exploit this vulnerability in TJCTF 2022 task named Fruit Store.

This is not a typical writeup! The priority is to explain in more detail what is this vulnerability and what tools can be used to solve similar tasks.

In this video you can learn what is a JavaScript Prototype Chain and how to use Insomnia Rest Client to prepare an exploit

#prototypepollution #capturetheflag #javascript

00:00 Intro
00:28 Fruit Store Challenge
02:32 What is Prototype Pollution?
03:45 Playing with the Fruit Store
04:25 Going through the Source Code
05:56 Looking for the Vulnerability
07:42 Preparing the Exploit
09:46 Getting the Flag

Hand Drawn icons created by Freepik - Flaticon

Music:
Goat's Skull - Verified Picasso
El Secreto - Yung Logos