Nodejs

Prototype Pollution

• Hacktricks PP
• CVE-2019-7609 Kibana article

Jail escaping

require

const Module = require('module');
const originalRequire = Module.prototype.require;

Module.prototype.require = function() {
  return originalRequire.apply(this, arguments);
};