---
id: 4757
title: "Dojo challenge #41 - Ruby treasure winners & writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-41"
published_at: "2025-06-04 14:53"
tags: ["bug-bounty", "ruby", "ctf", "dojo", "command-injection", "writeup"]
phying_url: "https://phying.com/item/4757"
lang: en
---

# Dojo challenge #41 - Ruby treasure winners & writeup

## Summary

Winners and writeups for Dojo challenge #41 'Ruby treasure', where participants bypassed a regex filter and exploited a command injection in Ruby's IO.read function to capture the flag.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-06-04 14:53
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-41
- **Phying News:** https://phying.com/item/4757