YPYogeshwar Peelainexploitnotes.hashnode.dev·6h ago · 11 min readHackSmarter - Casino WriteupSummary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·1d ago · 9 min readTryHackMe : Umbrella WriteupIntroduction Umbrella is a medium-difficulty TryHackMe box built around a leaky Docker registry, an exposed Node.js time-tracking application, and a classic writable-log privilege escalation. The path00
YPYogeshwar Peelainexploitnotes.hashnode.dev·2d ago · 13 min readBrunnerCTF 2026 : Half Baked WriteupSummary half_baked.py defines a BrunsvigerCake model with six nn.Linear layers, each with real pretrained weights and biases already assigned, but forward() just returns the input untouched - none of 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·2d ago · 6 min readBrunnerCTF 2026 : Magic or Not WriteupSummary The challenge provides four files (Brunner1.jpg, Brunner2.gif, Brunner3.png, Brunner4.bmp) that all report as generic data under file - none of them start with the magic bytes their extension 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·2d ago · 18 min readBrunnerCTF 2026 : The Three Ways WriteupSummary Two connected challenges built around the same Gitea/Drone/rollout-agent environment. The first stage (Flow) gets code execution on the Drone CI runner. The second stage (Feedback / Continuous00
