---
id: 4632
title: "Dojo challenge #51 Deadbolt solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-51"
published_at: "2026-06-10 07:54"
tags: ["rce", "ctf", "dojo", "yeswehack", "nodejs", "zip-slip"]
phying_url: "https://phying.com/item/4632"
lang: en
---

# Dojo challenge #51 Deadbolt solution

## Summary

Dojo challenge #51 Deadbolt solution: with yauzl's decodeStrings:false, a '../pwn.js' ZIP entry escapes the extraction directory and is auto-loaded from the plugin folder, achieving RCE.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-06-10 07:54
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-51
- **Phying News:** https://phying.com/item/4632