PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #43 CCTV Manager winners & writeup

yeswehack.com | blog | #rce | #ctf | #dojo | #command-injection | #yaml-deserialization | #predictable-token
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Dojo #43 'CCTV Manager' writeup: predicting a pseudo-random auth token to gain access, then exploiting YAML deserialization for OS command injection and RCE; winners mayaar, stealthcopter, Pr1nc3ss.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
blog · yeswehack.com
Dojo challenge #53 Hacker Club solution
This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.
blog · yeswehack.com
Dojo challenge #41 - Ruby treasure winners & writeup
Winners and writeups for Dojo challenge #41 'Ruby treasure', where participants bypassed a regex filter and exploited a command injection in Ruby's IO.read function to capture the flag.
blog · yeswehack.com
Dojo challenge #36 - Shell Escape winners and writeup
Winners and best writeups of Dojo challenge #36 'Shell Escape': chaining broken access control in a SQL statement with a command injection flaw to achieve remote code execution.
blog · yeswehack.com
DOJO Challenge #24 Winners!
Winners of DOJO Challenge #24 'Cipher', where participants reverse-engineered client-side JavaScript encryption to decrypt a secret cipher. Best write-ups: fravoi, stamet and Ruulian.
blog · yeswehack.com
DOJO CHALLENGE #17 Winners!
Winners of DOJO Challenge #17, a LeHack special edition: players bypassed a simulated WAF to execute JavaScript and retrieve a hidden password. Five best write-ups were rewarded.
Back