---
id: 4795
title: "Dojo challenge #37 - Hacker Forum winners and writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-37"
published_at: "2024-12-13 10:39"
tags: ["bug-bounty", "ctf", "sql-injection", "dojo", "yeswehack", "writeup"]
phying_url: "https://phying.com/item/4795"
lang: en
---

# Dojo challenge #37 - Hacker Forum winners and writeup

## Summary

Winners and best writeups of Dojo challenge #37 'Hacker Forum': a second-order SQL injection that plants a value in the database which later leaks the flag through a SELECT result.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2024-12-13 10:39
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-37
- **Phying News:** https://phying.com/item/4795