About Writeups Stats Tools Timeline Contact

About Writeups Stats Tools Timeline Contact@n4r3sh

Naresh Dhanuk

© 2026 — built & broken with care.

LinkedIn GitHub YesWeHack WhiteHub

About Writeups Stats Tools Timeline Contact

About Writeups Stats Tools Timeline Contact@n4r3sh

Naresh Dhanuk

© 2026 — built & broken with care.

LinkedIn GitHub YesWeHack WhiteHub

YesWeHack Dojo #53 - Hacker Club Writeup — Naresh Dhanuk

About Writeups Stats Tools Timeline Contact

About Writeups Stats Tools Timeline Contact@n4r3sh

Home/Writeups/YesWeHack Dojo #53 - Hacker Club Writeup

writeup##YesWeHack #Dojo

YesWeHack Dojo #53 - Hacker Club Writeup

Server-Side Template Injection (SSTI) via RFC 5322 Email Parsing Bypass

N

Naresh Dhanuk

Security Researcher

22 Jul 2026

4 min read

780 words

0 views

YesWeHack Dojo #53 - Hacker Club Writeup

On this page

0%

YesWeHack Dojo #53 - Hacker Club Writeup
Overview
Understanding the Code
Step 1 - Finding the API Endpoint
Step 2 - Bypassing the Domain Check
Step 3 - ERB Injection via Display Name
Step 4 - Reading the Flag
Summary
Impact
Remediation

Share this writeup

Help others find this research

Naresh Dhanuk

© 2026 — built & broken with care.

LinkedIn GitHub YesWeHack WhiteHub