Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #45 Chainfection solution

yeswehack.com | blog | #rce | #ctf | #dojo | #writeup | #sequelize | #cve-2023-25813 | #cve-2024-56198

Summary

Dojo #45 'Chainfection' writeup: chaining sequelize (CVE-2023-25813) and path-sanitizer (CVE-2024-56198) to overwrite a template file and achieve RCE; winners Flavius, dev_urandom and vh.
Published
Collected

original ↗

Related coverage

  1. Dojo challenge #53 Hacker Club solution (yeswehack.com)
  2. DOJO CHALLENGE #4 Winners! (yeswehack.com)
  3. Dojo challenge #46 Ghost whisper solution (yeswehack.com)
  4. Dojo challenge #44 Hardware monitor write-up (yeswehack.com)
  5. Dojo challenge #41 - Ruby treasure winners & writeup (yeswehack.com)
  6. Dojo challenge #40 - Hacker profile winners & writeup (yeswehack.com)

back