---
id: 4839
title: "Dojo challenge #31 winners!"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-31"
published_at: "2024-04-16T12:55:42Z"
tags: ["bug-bounty", "ctf", "dojo", "yeswehack", "ssti", "writeup"]
phying_url: "https://phying.com/item/4839"
lang: en
---

# Dojo challenge #31 winners!

## Summary

Winners and best writeups of Dojo challenge #31, 'Coffee shop': exploiting a server-side template injection (SSTI) to read the flag from environment variables; top reports by tpi, h0rus3c and inazo.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2024-04-16T12:55:42Z
- **Original:** https://www.yeswehack.com/dojo/dojo-ctf-challenge-winners-31
- **Phying News:** https://phying.com/item/4839