> For the complete documentation index, see [llms.txt](https://yasmeen-rezk.gitbook.io/my-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://yasmeen-rezk.gitbook.io/my-notes/bug-bounty-playbook-v2/more-owasp/prototype-pollution.md).
# Prototype Pollution
No limit to what you can potentially do with this vulnerability.
**JS is a prototype-based language.**
* JS objects inherit features from one another using Prototypes meaning if the prototype object is modified in one object it will apply to every other object.
* Prototypes are used to overwrite functions, variables, and anything else.
Prototype Figure
### Exploitation
**Goal:** setting the “admin” variable to true.
Vulnerable code snippet
During the merge process if it comes across a prototype object it will add that to the user object.
#### To do:
* Sending a prototype object with a variable called “admin” which is set to “true”
* The admin object inherited the admin variable from the modified prototype object.
* When the line checks to see if admin.admin is set to true it will pass.
