---
id: 4699
title: "Dojo challenge #49 Secret Manager solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-49"
published_at: "2026-03-25 08:35"
tags: ["rce", "ctf", "path-traversal", "dojo", "yeswehack", "argument-injection", "busybox"]
phying_url: "https://phying.com/item/4699"
lang: en
---

# Dojo challenge #49 Secret Manager solution

## Summary

Dojo #49: a three-step chain — argument injection into cp, a traversal quirk and BusyBox grep's missing --exclude-dir flag — only dangerous when all three fire in one request.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-03-25 08:35
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-49
- **Phying News:** https://phying.com/item/4699