Prototype Pollution, Web Pen Testing, Burpsuite, Penetration Testing.
599) "__proto__": { "status":555 } remove a comma at the end of “sessionid” to cause parsing error , we can see the status code is injected Bypassing flawed input filters for server-side prototype pollution To solve the lab Find a prototype pollution source that you can use to add arbitrary