The Golden Fork

Author

Hamza Hashim

Room overview

Learn how server-side prototype pollution can cross trust boundaries in a partner API. Trace a nested JSON merge into inherited authorization and command options, then investigate the root-helper configuration flaw and verify the fixes without breaking normal operations.

Hands On Lab: The Golden Fork

medium · Web · Hands On