← All Challenges
Challenge 51 of 66

Prototype Poisoner

🔴 Elite Web App +150 XP

A Node.js app deep-merges user input into objects. Pollute Object.prototype to inject isAdmin=true on all objects.

Prototype Poisoner // sandbox
Send {"__proto__":{"isAdmin":true}} in your JSON body.

🏆 Challenge Complete!

+150 XP earned
Next Challenge →