---
id: 4879
title: "DOJO CHALLENGE #20 Winners!"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-20-winners"
published_at: "2023-06-06T13:37:00Z"
tags: ["bug-bounty", "web-security", "dojo", "dom-xss", "cross-site-scripting", "cwe-79", "write-up"]
phying_url: "https://phying.com/item/4879"
lang: en
---

# DOJO CHALLENGE #20 Winners!

## Summary

Winners of DOJO Challenge #20 'Butters Adventure', which required exploiting a DOM-based XSS via the $cmd parameter. Best write-ups: Tihmz, bosstester and Braxoia.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2023-06-06T13:37:00Z
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-20-winners
- **Phying News:** https://phying.com/item/4879