---
id: 4744
title: "Dojo challenge #42 - Hex Color Palette winners & writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-42"
published_at: "2025-07-11 13:02"
tags: ["ctf", "dojo", "xxe", "file-disclosure", "lxml", "error-based"]
phying_url: "https://phying.com/item/4744"
lang: en
---

# Dojo challenge #42 - Hex Color Palette winners & writeup

## Summary

Dojo #42 'Hex Color Palette' writeup: exploiting an XXE in the lxml library via error-based exfiltration to leak /tmp/flag.txt; winners 0necloud, Cryptocat and 3c4d.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-07-11 13:02
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-42
- **Phying News:** https://phying.com/item/4744