Remote code execution via server-side prototype pollution

PortSwigger Web Security Academy lab: Remote code execution via server-side prototype pollution. Topic: Prototype Pollution.

Remote code execution via server-side prototype pollution

$ tldr PortSwigger · Prototype Pollution

·	·
Platform	PortSwigger Web Security Academy
Topic	Prototype Pollution
Difficulty	PRACTITIONER
Official lab	Open

Solve the lab

Language	Author	Format	Link
🇬🇧 EN	PortSwigger	Texto	Open

Resources by skill

Skill	Source	Link
Remote Code Execution (RCE)	HackTricks	Open
Prototype Pollution	PortSwigger	Open

Related skills

Remote Code Execution (RCE) · Prototype Pollution

---

Comments & tips

Solved this lab a different way? Share it here — comments live in GitHub Discussions.

Last updated: 2026-05-08