DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Yet another way to invoke functions without parentheses

Quality: 6/10 Relevance: 8/10

Summary

The post describes a JavaScript exploitation technique that invokes arbitrary functions without parentheses by abusing the Error.prepareStackTrace mechanism and prototype manipulation. It outlines how stack traces, the Function constructor, and prototype pollution can be combined to generate and execute code, highlighting security implications around JavaScript internals and code execution risks.

🚀 Service construit par Johan Denoyer