---
id: 6731
title: "Dojo challenge #53 Hacker Club solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-53"
published_at: "2026-08-26T07:42:00Z"
tags: ["bug-bounty", "rce", "pentesting", "appsec", "ruby", "ctf", "poc", "dojo", "template-injection", "yeswehack", "ssti"]
phying_url: "https://phying.com/item/6731"
lang: en
---

# Dojo challenge #53 Hacker Club solution

## Summary

The official writeup for YesWeHack Dojo challenge #53: the target is vulnerable to SSTI if a hunter can bypass the email regex and mail-parser quirks to smuggle ERB template syntax into the Ruby interpolation path, reaching the full runtime to exfiltrate the flag.

## Why it matters

This technical writeup demonstrates practical payload crafting for Ruby ERB template injection vulnerabilities.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-08-26T07:42:00Z
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-53
- **Phying News:** https://phying.com/item/6731