Server Side Prototype Pollution

This website has been developed using Nodejs and has a server side prototype pollution vulnerability vulnerability.

Requirements:

1. Npm
2. Node Js
3. MySQL

You can install this website in two different ways:

1. NPM Node JS and MySQL installations by hand
2. With Docker Compose

Docker Compose Installation

1. Get docker-compose.yml file in repository
2. Run this command:

docker compose -f docker-compose.yml up -d

1. Go to localhost:4111/install (If you change the port and host information manually, you must move accordingly).

Manual Installation

1. Clone repository

git clone https://github.com/Serhatcck/server-side-prototype-pollution.git

cd server-side-prototype-pollution

3. İnstall all packages

npm install

1. Create MYSQL server
2. Configure db connection with configs/db file or environment value:
   1. host
   2. user
   3. password
   4. database
3. Start App

node app.js

1. Go to localhost:4111/install (If you change the port and host information manually, you must move accordingly).

Images