PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DOJO CHALLENGE #11 Winners!

yeswehack.com | blog | #bug-bounty | #ctf | #community | #dojo | #mongodb | #write-ups
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recap of DOJO Challenge #11: bypassing MongoDB's security filters to recover the administrator's password. Winners k4rqd0c, Al-Madjus and w31rd0 documented their paths and remediation notes.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
blog · yeswehack.com
DOJO CHALLENGE #14 Winners!
Recap of DOJO Challenge #14: entrants studied JavaScript hoisting to bypass protections and execute a function that revealed the flag. Winners Dtql, Brumens and s3asarv3sh share their write-ups.
blog · yeswehack.com
DOJO CHALLENGE #13 Winners!
Recap of DOJO Challenge #13: participants bypassed a blacklist and exploited prototype pollution to execute alert(). Winners Dominikoso, Panya and Yongi share their write-ups.
blog · yeswehack.com
DOJO CHALLENGE #12 Winners!
Recap of DOJO Challenge #12: a JavaScript puzzle hid a FLAG inside an anonymous function. Designed by DOJO master Ivarsvids; winners zomsop82, Serizao and Pinky share write-ups.
blog · yeswehack.com
DOJO CHALLENGE #10 Winners!
Recap of DOJO Challenge #10: contestants built JavaScript payloads that are palindromes, sparking few-character solutions. Ivarsvids was fastest; four standout reports are highlighted.
blog · yeswehack.com
DOJO CHALLENGE #9 Winners!
Recap of DOJO Challenge #9: crafting a valid prototype pollution payload to exploit SSRF and retrieve a secret flag. Robin was fastest; four top write-ups are highlighted.
Back