PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #42 - Hex Color Palette winners & writeup

yeswehack.com | blog | #ctf | #dojo | #xxe | #file-disclosure | #lxml | #error-based
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Dojo #42 'Hex Color Palette' writeup: exploiting an XXE in the lxml library via error-based exfiltration to leak /tmp/flag.txt; winners 0necloud, Cryptocat and 3c4d.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
blog · yeswehack.com
XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities
The ultimate XXE guide: abusing XML parser entity handling for file disclosure, internal reconnaissance, cloud metadata theft — even via DOCX uploads — and RCE in some configurations.
blog · yeswehack.com
Dojo challenge #53 Hacker Club solution
This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.
blog · yeswehack.com
‘The level of automation right now is crazy’: GoDiego on why post-auth vulnerabilities are the future of Bug Bounty
Q&A with Spanish hunter GoDiego: his first bug — an XXE in a careers 'extract data from Word' feature — plus why he sees automation pushing Bug Bounty toward post-authentication vulnerabilities.
blog · yeswehack.com
DOJO Challenge #24 Winners!
Winners of DOJO Challenge #24 'Cipher', where participants reverse-engineered client-side JavaScript encryption to decrypt a secret cipher. Best write-ups: fravoi, stamet and Ruulian.
blog · yeswehack.com
DOJO CHALLENGE #17 Winners!
Winners of DOJO Challenge #17, a LeHack special edition: players bypassed a simulated WAF to execute JavaScript and retrieve a hidden password. Five best write-ups were rewarded.
Back