---
id: 4738
title: "Dojo challenge #43 CCTV Manager winners & writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-43"
published_at: "2025-08-21 11:48"
tags: ["rce", "ctf", "dojo", "command-injection", "yaml-deserialization", "predictable-token"]
phying_url: "https://phying.com/item/4738"
lang: en
---

# Dojo challenge #43 CCTV Manager winners & writeup

## Summary

Dojo #43 'CCTV Manager' writeup: predicting a pseudo-random auth token to gain access, then exploiting YAML deserialization for OS command injection and RCE; winners mayaar, stealthcopter, Pr1nc3ss.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-08-21 11:48
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-43
- **Phying News:** https://phying.com/item/4738