YPYogeshwar Peelainexploitnotes.hashnode.dev·2h ago · 4 min readBrunnerCTF : Git Gud Writeup (2026)Summary A Flask web app accepts a .tar upload of a "git repository" and runs git status and git log against it to display commit stats. Because the tar is extracted with no validation and real git com00