Skip to content
Dojo challenge #43 CCTV Manager winners & writeup
yeswehack.com | blog | #rce | #ctf | #dojo | #command-injection | #yaml-deserialization | #predictable-token
Summary
Dojo #43 'CCTV Manager' writeup: predicting a pseudo-random auth token to gain access, then exploiting YAML deserialization for OS command injection and RCE; winners mayaar, stealthcopter, Pr1nc3ss.
- Published
- Collected