> For the complete documentation index, see [llms.txt](https://books.spartan-cybersec.com/web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://books.spartan-cybersec.com/web/prototype-pollution/lab-1-client-side-prototype-pollution-via-browser-apis/utilizando-dom-invader.md).

# Utilizando DOM Invader

Primero inicializamos el navegador:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FJDZZAtHf7MT3rY7fUFjW%2Fimage.png?alt=media&amp;token=d809e9f5-7016-45d8-8048-a00501042f18" alt=""><figcaption></figcaption></figure>

Luego habilitamos el DOM Invader:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2F0MMt0eRYzHlzXqtq5zYj%2Fimage.png?alt=media&amp;token=668bb2c6-c3a5-47a6-a966-27edef6e328f" alt=""><figcaption></figcaption></figure>

Y tambien habilitamos esta opcion:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FAjKs38j31B4r8p8rUVg9%2Fimage.png?alt=media&amp;token=e641fe1b-026c-4051-9ea0-0aeedfa918d1" alt=""><figcaption></figcaption></figure>

Luego de lo anterior, podemos apreciar lo siguiente en el devtools:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2Fzsn0v5GxyglXuPXFG3dH%2Fimage.png?alt=media&amp;token=87f93386-322d-4228-bf27-a24872e3402d" alt=""><figcaption></figcaption></figure>

Luego clickeamos en scan for gadgets:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FDz9XoSowWxl4x92dehJ7%2Fimage.png?alt=media&amp;token=7d845245-8515-4d3d-a767-41219201ef3a" alt=""><figcaption></figcaption></figure>

Y luego abrimos el devtools y le damos en exploit:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FC9XZVKrJccVPFxsv7EKK%2Fimage.png?alt=media&amp;token=fc66035f-1ec0-455f-b83c-0613a0035ac1" alt=""><figcaption></figcaption></figure>

Luego de lo anterior, obtendremos nuestra ejecuccion de codigo js:

<figure><img src="https://1990863415-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCohdns2VDWfowigRKoD0%2Fuploads%2FRkYb72xqCx6IDvCePVwu%2Fimage.png?alt=media&amp;token=609d4f04-3b26-46c0-af12-dded1de94610" alt=""><figcaption></figcaption></figure>