Feed
Pro
Search

Sign in
Darkshift - a dark factory for software Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

FeedDiscussion

Yogeshwar Peela

3h ago

BrunnerCTF 2026 : The Three Ways Writeup

Summary Two connected challenges built around the same Gitea/Drone/rollout-agent environment. The first stage (Flow) gets code execution on the Drone CI runner. The second stage (Feedback / Continuous

exploitnotes.hashnode.dev18 min read

#the-three-ways #ctf #ctf-writeup #gitea #drone-ci #supply-chain-attack #cicd-security #git-history #secret-leakage #privilege-escalation #linux-privilege-escalation #root-exploitation #web-security #devsecops #ci-security #gitea-exploitation

Responses

No responses yet.

#drone-exploitation

#package-registry

#artifact-signing

#unsigned-artifacts

#capture-the-flag

#penetration-testing

#vulnerability-assessment

#offensive-security

#brunnerctf-writeup