Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #36 - Shell Escape winners and writeup

yeswehack.com | blog | #rce | #access-control | #ctf | #dojo | #command-injection | #writeup

Summary

Winners and best writeups of Dojo challenge #36 'Shell Escape': chaining broken access control in a SQL statement with a command injection flaw to achieve remote code execution.
Published
Collected

original ↗

Related coverage

  1. Dojo challenge #53 Hacker Club solution (yeswehack.com)
  2. Dojo challenge #41 - Ruby treasure winners & writeup (yeswehack.com)
  3. DOJO CHALLENGE #4 Winners! (yeswehack.com)
  4. Dojo challenge #30 winners! (yeswehack.com)
  5. Dojo challenge #46 Ghost whisper solution (yeswehack.com)
  6. Dojo challenge #45 Chainfection solution (yeswehack.com)

back