---
id: 4889
title: "DOJO CHALLENGE #21 Winners!"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-21-winners"
published_at: "2023-02-14T14:20:00Z"
tags: ["bug-bounty", "access-control", "sql-injection", "web-security", "cwe-284", "dojo", "write-up"]
phying_url: "https://phying.com/item/4889"
lang: en
---

# DOJO CHALLENGE #21 Winners!

## Summary

Winners of DOJO Challenge #21 'EvilTwin-Admin', where players exploited a SQL logic flaw to register an admin account, a Broken Access Control case (CWE-284). Top write-ups: Floczii, W00dy, clhack.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2023-02-14T14:20:00Z
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-21-winners
- **Phying News:** https://phying.com/item/4889