YPYogeshwar Peelainexploitnotes.hashnode.dev·6d ago · 18 min readBrunnerCTF 2026 : The Three Ways WriteupSummary Two connected challenges built around the same Gitea/Drone/rollout-agent environment. The first stage (Flow) gets code execution on the Drone CI runner. The second stage (Feedback / Continuous00
YPYogeshwar Peelainexploitnotes.hashnode.dev·6d ago · 6 min readBrunnerCTF 2026 : Magic or Not WriteupSummary The challenge provides four files (Brunner1.jpg, Brunner2.gif, Brunner3.png, Brunner4.bmp) that all report as generic data under file - none of them start with the magic bytes their extension 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·6d ago · 13 min readBrunnerCTF 2026 : Half Baked WriteupSummary half_baked.py defines a BrunsvigerCake model with six nn.Linear layers, each with real pretrained weights and biases already assigned, but forward() just returns the input untouched - none of 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 8 min readTryHackMe : Athena WriteupOverview Athena is an easy-rated TryHackMe box that chains a leaked internal path (found via an anonymous SMB share) into a command injection vulnerability in a "router panel" ping tool, followed by a00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 4 min readTryHackMe: Corridor - WriteupOverview Corridor is an easy TryHackMe box built around a single Flask/Werkzeug web app. The homepage presents an image of a corridor with thirteen clickable doors, each linking to a URL that is an MD00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 5 min readTryHackMe : Bugged - WriteupOverview Bugged is an easy TryHackMe box built around an MQTT broker (Mosquitto) that allows anonymous connections. The broker exposes normal-looking IoT device telemetry alongside a hidden backdoor t00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 15 · 11 min readTryHackMe : Different CTF writeupSummary Different CTF is an easy-rated Linux box built around a WordPress install with an exposed wp-config.php, an FTP service reachable with credentials hidden inside a steganographic image, and a c00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 12 · 7 min readTryHackMe : Lookup writeupSummary Lookup is an easy Linux box built around a login portal that redirects authenticated users to a vhost-hosted elFinder file manager. Username enumeration on the login form combined with passwor11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 11 · 18 min readTryHackMe : The London Bridge writeupSummary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF 11N
