Better hackers than me have made videos on this. Check them out;
◇ https://www.youtube.com/watch?v=XS_UMqQalLI
Some super cool resources on prototype pollution;
◇ https://book.hacktricks.xyz/pentesting-web/deserialization/nodejs-proto-prototype-pollution
