PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DOJO CHALLENGE #17 Winners!

yeswehack.com | blog | #bug-bounty | #dojo | #javascript | #waf-bypass | #write-up | #lehack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Winners of DOJO Challenge #17, a LeHack special edition: players bypassed a simulated WAF to execute JavaScript and retrieve a hidden password. Five best write-ups were rewarded.
Published
Collected

Related coverage

blog · yeswehack.com
DOJO CHALLENGE #15 Winners!
Winners of DOJO Challenge #15, created by community member Brumens: players bypassed multiple simulated WAF security levels to execute JavaScript. Top write-ups: iQimpz, ctfpoulpe and w31rd0.
blog · yeswehack.com
DOJO CHALLENGE #18 Winners!
Winners of DOJO Challenge #18, version 2.0 of the WAF-bypass challenge: new simulated WAF security levels had to be defeated to execute JavaScript. Top write-ups: Yo0x, parsely, kacihmd.
blog · yeswehack.com
DOJO Challenge #25 Winners!
Winners of DOJO Challenge #25 'RootCSS', where players exploited CSS injection to load an attacker-hosted stylesheet and manipulate client-side JavaScript. Top write-ups: Hitsuomi, nishacid, hack42.
blog · yeswehack.com
DOJO Challenge #24 Winners!
Winners of DOJO Challenge #24 'Cipher', where participants reverse-engineered client-side JavaScript encryption to decrypt a secret cipher. Best write-ups: fravoi, stamet and Ruulian.
blog · yeswehack.com
DOJO CHALLENGE #19 Winners!
Winners of DOJO Challenge #19: players bypassed a SQL LIMIT set to zero to leak database records and recover the admin's email and password. Best write-ups: Xk3tla, Karaharauh, Cyrilp.
blog · yeswehack.com
DOJO CHALLENGE #8 Winners!
Write-ups from DOJO Challenge #8, where YesWeHack participants had to bypass three security mechanisms protecting against SSRF to retrieve a secret flag; includes the three best winning reports.
Back