BrunnerCTF : Git Gud Writeup (2026)

Summary A Flask web app accepts a .tar upload of a "git repository" and runs git status and git log against it to display commit stats. Because the tar is extracted with no validation and real git com