---
id: 4706
title: "Dojo challenge #48 RubitMQ solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-48"
published_at: "2026-02-19 08:17"
tags: ["rce", "ruby", "ctf", "dojo", "yeswehack", "insecure-deserialization"]
phying_url: "https://phying.com/item/4706"
lang: en
---

# Dojo challenge #48 RubitMQ solution

## Summary

Dojo #48: Oj.load's unrestricted object mode lets crafted JSON instantiate a gadget class whose find command executes arbitrary shell through -exec — deserialization to RCE in one chain.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-02-19 08:17
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-48
- **Phying News:** https://phying.com/item/4706