Dojo challenge #53 Hacker Club solution
yeswehack.com | blog | #bug-bounty | #rce | #pentesting | #appsec | #ruby | #ctf | #poc | #dojo | #template-injection | #yeswehack | #ssti
Summary
The official writeup for YesWeHack Dojo challenge #53: the target is vulnerable to SSTI if a hunter can bypass the email regex and mail-parser quirks to smuggle ERB template syntax into the Ruby interpolation path, reaching the full runtime to exfiltrate the flag.
Why it matters
This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.
- Published
- Collected
--- id: 6731 title: "Dojo challenge #53 Hacker Club solution" source_domain: yeswehack.com source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-53" published_at: "2026-08-26T07:42:00Z" tags: ["bug-bounty", "rce", "pentesting", "appsec", "ruby", "ctf", "poc", "dojo", "template-injection", "yeswehack", "ssti"] phying_url: "https://phying.com/item/6731" lang: en --- # Dojo challenge #53 Hacker Club solution ## Summary The official writeup for YesWeHack Dojo challenge #53: the target is vulnerable to SSTI if a hunter can bypass the email regex and mail-parser quirks to smuggle ERB template syntax into the Ruby interpolation path, reaching the full runtime to exfiltrate the flag. ## Why it matters This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities. ## Intelligence Metadata - **Sources:** yeswehack.com - **Published:** 2026-08-26T07:42:00Z - **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-53 - **Phying News:** https://phying.com/item/6731