---
id: 4805
title: "Dojo challenge #36 - Shell Escape winners and writeup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-36"
published_at: "2024-11-08 09:00"
tags: ["rce", "access-control", "ctf", "dojo", "command-injection", "writeup"]
phying_url: "https://phying.com/item/4805"
lang: en
---

# Dojo challenge #36 - Shell Escape winners and writeup

## Summary

Winners and best writeups of Dojo challenge #36 'Shell Escape': chaining broken access control in a SQL statement with a command injection flaw to achieve remote code execution.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2024-11-08 09:00
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-36
- **Phying News:** https://phying.com/item/4805