13 talks tagged with this topic.
Loading filters…
1–13 of 13 talks · loading…
IEEE Symposium on Security and Privacy 2025·11 min
Security researchers examine technical aspects of 402 Follow My Flowcolon Unveiling Client Side Prototype Pollution Gadgets from One Million Real Worl.
NorthSec·23 min
Olivier Arteau -
Engineers explore architecture and security mechanisms for Olivier Arteau -- Prototype pollution attacks in NodeJS applications.
nullcon·42 min
Industry experts analyze emerging threats surrounding Berlin 2023 | Server Side Prototype Pollution: Blackbox Detection Without The DoS by Gareth.
PROIDEA Events·46 min
Michał Bentkowski
Michał Bentkowski analyzes OMH 2021: Prototype pollution - czyli jak zatruć aplikację XSS-em.
Videos·40 min
BitK investigates Prototype Pollution and Where to Find Them.
IEEE Symposium on Security and Privacy·20 min
Engineers explore architecture and security mechanisms for 2024 449 Undefined oriented Programming Detecting and Chaining Prototype Pollution Gadgets in Node.
Main Stage·46 min
Mikhail Shcherbakov
Advanced JavaScript and TypeScript exploit primitives turning theoretically unexploitable flaws in Kibana into working code execution.
Black Hat Asia·40 min
Mikhail Shcherbakov
Presenters detail vulnerability discovery and exploitation in Prototype Pollution Leads to RCE: Gadgets Everywhere.
Main Stage·20 min
Mikhail Shcherbakov · Musard Balliu
Mikhail Shcherbakov and Musard Balliu uncover universal Prototype Pollution gadgets within Node.js core and popular NPM packages, achieving RCE across major applications.
OWASP Global AppSec Dublin·41 min
Gareth Heyes
Provides gobal AppSec Dublin: Server Side Prototype Pollution and evaluates key implications for security practitioners.
leHACK·28 min
Details 🇫🇷 PROTOTYPE POLLUTION and evaluates key implications for security practitioners.
NahamSec·38 min
NahamCon2021 - Using Chromedp to Hunt for Prototype Pollution - @TomNomNomDotCom.
Main Stage·30 min
Feng Xiao
Feng Xiao presents Hidden Property Abusing (HPA), a novel attack vector exploiting internal Node.js runtime properties to achieve arbitrary code execution.
