---
id: 4780
title: "Dojo challenge #39 - Phishing winners & writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-39"
published_at: "2025-03-06 14:57"
tags: ["ctf", "sandbox-escape", "dojo", "javascript", "writeup", "punycode"]
phying_url: "https://phying.com/item/4780"
lang: en
---

# Dojo challenge #39 - Phishing winners & writeup

## Summary

Winners and writeups for Dojo challenge #39 'Phishing': a punycode attack to overwrite source code, escape a sandbox and execute a JavaScript code injection that exposes the flag.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-03-06 14:57
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-39
- **Phying News:** https://phying.com/item/4780