---
id: 4713
title: "Dojo challenge #46 Ghost whisper solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-46"
published_at: "2025-12-04 08:36"
tags: ["rce", "dojo", "writeup", "unicode", "code-injection", "nfkc", "subprocess"]
phying_url: "https://phying.com/item/4713"
lang: en
---

# Dojo challenge #46 Ghost whisper solution

## Summary

Writeup for YesWeHack Dojo #46 'Ghost Whisper': a Unicode NFKC normalisation quirk turns a character into a quote, bypassing sanitisation and enabling RCE via subprocess.run.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-12-04 08:36
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-46
- **Phying News:** https://phying.com/item/4713