PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DOJO CHALLENGE #6 Winners!

yeswehack.com | vulnerability | #ctf | #sql-injection | #web-security | #dojo | #yeswehack | #write-up
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

DOJO Challenge #6 recap: participants crafted SQL injection payloads that bypassed an input filter forbidding common SQL comment syntax; lists the fastest solves and best write-ups.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
vulnerability · yeswehack.com
DOJO CHALLENGE #20 Winners!
Winners of DOJO Challenge #20 'Butters Adventure', which required exploiting a DOM-based XSS via the $cmd parameter. Best write-ups: Tihmz, bosstester and Braxoia.
vulnerability · yeswehack.com
DOJO Challenge #23 Winners!
Winners and best write-ups from DOJO Challenge #23 '5Ways2XSS', where players had to craft a single payload that exploited five XSS-vulnerable input sections at once.
vulnerability · yeswehack.com
DOJO Challenge #22 Winners!
Winners of DOJO Challenge #22 'Butters Adventure v2', where players used a DOM clobbering technique to overwrite JavaScript's getElementById() function. Top write-ups: Scttpr, CharlB, hamzaavvan.
vulnerability · yeswehack.com
DOJO CHALLENGE #21 Winners!
Winners of DOJO Challenge #21 'EvilTwin-Admin', where players exploited a SQL logic flaw to register an admin account, a Broken Access Control case (CWE-284). Top write-ups: Floczii, W00dy, clhack.
vulnerability · yeswehack.com
DOJO CHALLENGE #3 Winners!
DOJO Challenge #3 asked players to trigger XSS through two heavily filtered parameters inside a conditional block; the post announces first solves, best write-ups and the DOJO training platform.
Back