Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #38 - Xmas wishlist, winners and writeup

yeswehack.com | blog | #bug-bounty | #ctf | #dojo | #injection | #writeup | #format-string

Summary

Winners and writeups for Dojo challenge #38 'Xmas wishlist': a format string injection to read system environment variables and reveal the flag. Winners: YoyoDavelion, kharaone and 3c4d.
Published
Collected

original ↗

Related coverage

  1. Dojo challenge #53 Hacker Club solution (yeswehack.com)
  2. DOJO CHALLENGE #4 Winners! (yeswehack.com)
  3. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  4. YesWeHack joins G-Cloud framework for UK public-sector procurement after clearing rigorous evaluation (yeswehack.com)
  5. How to use Codex for Bug Bounty research: explore broadly, validate rigorously (yeswehack.com)
  6. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)

back