PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #32 winners!

yeswehack.com | vulnerability | #ctf | #prototype-pollution | #python | #dojo | #yeswehack | #writeup
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Winners and best writeups of Dojo challenge #32, 'Security Panel': exploiting a class pollution (Python prototype pollution) bug to capture the flag; top reports by Kant1, ambush and denabled.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
vulnerability · yeswehack.com
DOJO CHALLENGE #7 Winners!
DOJO Challenge #7 asked hunters to craft a valid WAF bypass to exploit XSS via prototype pollution; the post lists winners and the best write-ups covering exploitation, PoC and remediation.
blog · yeswehack.com
Dojo challenge #53 Hacker Club solution
This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.
blog · yeswehack.com
DOJO CHALLENGE #13 Winners!
Recap of DOJO Challenge #13: participants bypassed a blacklist and exploited prototype pollution to execute alert(). Winners Dominikoso, Panya and Yongi share their write-ups.
blog · yeswehack.com
DOJO CHALLENGE #9 Winners!
Recap of DOJO Challenge #9: crafting a valid prototype pollution payload to exploit SSRF and retrieve a secret flag. Robin was fastest; four top write-ups are highlighted.
blog · yeswehack.com
DOJO CHALLENGE #4 Winners!
Recap of YesWeHack's fourth DOJO Challenge, which asked hunters to defeat an obfuscated XPath request and derive working serials; includes the podium, community write-ups, and a manual-solve bonus.
Back