**Official Writeup**

**tl;dr**

+ `Json_Interoperability` - /verify_roles?role=supersuperuseruser\ud800","name":"admin
+ `Prototype_Pollution` - {"constructor":{"prototype":{"test":"123"}}} in config-handler
+ `RCE` - using squirrelly-js

Link to the writeup: https://blog.bi0s.in/2021/08/15/Web/inCTFi21-JsonAnalyser/

Author: [Sayooj](https://twitter.com/_1nt3rc3pt0r_)

Original writeup (https://blog.bi0s.in/2021/08/15/Web/inCTFi21-JsonAnalyser/).