Prototype Pollution, Web Pen Testing, Burpsuite, Penetration Testing.
browser scan for gadgets a DOM prototype pollution is found , click exploit /#proto[hitCallback]=alert%281%29 calls document.cookie /#proto[hitCallback]=alert%28document.cookie%29 Look at the requirement of this challenge Use DOM Invader to identify a prototype pollution and a gadget for DOM XSS.