---
title: "Discussion on \"BrunnerCTF 2026 : The Three Ways Writeup\" | Hashnode"
description: "Discussion on \"BrunnerCTF 2026 : The Three Ways Writeup\". The Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access."
url: "https://hashnode.com/posts/brunnerctf-2026-the-three-ways-writeup/6a8b17fec9ed6fd6e84326ef"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [BrunnerCTF 2026 : The Three Ways Writeup](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed)

The Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access.

Aug 23 · 18 min read · exploitnotes.hashnode.dev  
Read the article

-   [#the-three-ways](https://hashnode.com/tag/the-three-ways)
-   [#ctf](https://hashnode.com/tag/ctf)
-   [#ctf-writeup](https://hashnode.com/tag/ctf-writeup)
-   [#gitea](https://hashnode.com/tag/gitea)
-   [#drone-ci](https://hashnode.com/tag/drone-ci)
-   [#supply-chain-attack](https://hashnode.com/tag/supply-chain-attack)
-   [#cicd-security](https://hashnode.com/tag/cicd-security)
-   [#git-history](https://hashnode.com/tag/git-history)
-   [#secret-leakage](https://hashnode.com/tag/secret-leakage)
-   [#privilege-escalation](https://hashnode.com/tag/privilege-escalation)
-   [#linux-privilege-escalation](https://hashnode.com/tag/linux-privilege-escalation)
-   [#root-exploitation](https://hashnode.com/tag/root-exploitation)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#ci-security](https://hashnode.com/tag/ci-security)
-   [#gitea-exploitation](https://hashnode.com/tag/gitea-exploitation)
-   [#drone-exploitation](https://hashnode.com/tag/drone-exploitation)
-   [#package-registry](https://hashnode.com/tag/package-registry)
-   [#rollout-agent](https://hashnode.com/tag/rollout-agent)
-   [#artifact-signing](https://hashnode.com/tag/artifact-signing)
-   [#unsigned-artifacts](https://hashnode.com/tag/unsigned-artifacts)
-   [#rce](https://hashnode.com/tag/rce)
-   [#reverse-shell](https://hashnode.com/tag/reverse-shell)
-   [#capture-the-flag](https://hashnode.com/tag/capture-the-flag)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#vulnerability-assessment](https://hashnode.com/tag/vulnerability-assessment)
-   [#offensive-security](https://hashnode.com/tag/offensive-security)
-   [#red-team](https://hashnode.com/tag/red-team)
-   [#brunnerctf](https://hashnode.com/tag/brunnerctf)
-   [#brunnerctf-writeup](https://hashnode.com/tag/brunnerctf-writeup)

## Written by

[Yogeshwar Peela](https://hashnode.com/@exploitnotes)

@exploitnotes · Vishakapatnam, India

  
[View profile](https://hashnode.com/@exploitnotes)

I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking

## Responses

Markdown supported · ⌘↵ to post

No responses yet.