YPYogeshwar Peelainexploitnotes.hashnode.dev·2h ago · 8 min readBrunnerCTF : Bink Ink WriteupSummary The challenge exposes a firmware update service ("Bink ink update tool v1.0.5") running as brunner_operator inside a Debian container, reachable only through a Squid proxy. The tool accepts te00
YPYogeshwar Peelainexploitnotes.hashnode.dev·2h ago · 7 min readBrunnerCTF - php-2003 WriteupSummary A "Brunnerne Hosting" customer portal exposed a legacy reservation import form that fed user-controlled, base64-encoded data into unserialize(). Getting a flag required chaining three independ00
YPYogeshwar Peelainexploitnotes.hashnode.dev·2h ago · 8 min readBrunnerCTF : WordPressed to Root WriteupOverview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kubernetes challenge deployment. Initial access comes thr00
YPYogeshwar Peelainexploitnotes.hashnode.dev·3h ago · 3 min readBrunnerCTF 2026 - Welcome Aboard (Web)Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt) returns a hard 403 Access is forbidden. from Kestrel. The platf00
