Lab 407 — LinguaSync — RCE via i18n Prototype Pollution

hackadvisor

Task: Node.js/Express localization dashboard with i18next resource API and report generation. Solution: Prototype pollution via setPath() in /locales/resources (lng=__proto__&ns=shell sets Object.prototype.shell=true), then command injection via reportType in report generation where spawn() inherits shell mode.