Working at Securitum Pentester / Researcher / Web Security Instructor Bug bounty hunter 0x08 place at Google's 0x0A Loving client-side security Speaking XSS Prototype-based inheritance What's prototype pollution anyway? DEMO: RCE via prototype pollution in Kibana Lessons learnt
![Prototype Pollution in Kibana](https://cdn-ak-scissors.b.st-hatena.com/image/square/915064b5855d877bc8ec9b0d766d0819b4515fb5/height=288;version=1;width=512/https%3A%2F%2Fmedia.slid.es%2Fthumbnails%2F64b44ee646b81ed084fb4316b502b8a3%2Fthumb.jpg%3F1570873063)