illusion - pwn2win 2021 Sayooj B Kumar 2021-06-03 Web Exploitation tl;dr Using Prototype pollution vulnerablity in fast-json-patch pollute value in outputFunctionName Get a shell as the flag can only be obtained using binary file Read More RCE Prototype pollution