Prototype Pollution, Web Pen Testing, Burpsuite, Penetration Testing.
JavaScript. Combine these to call alert(). Use manual or DOM invader solution DOM Invader Enable DOM invader and prototype pollution in settings Inspect elements with devtools default Scan for gadgets and exploit /?__proto__[value]=data%3A%2Calert%281%29 Privilege escalation via server-side