BrunnerCTF 2026 : Half Baked Writeup
Summary half_baked.py defines a BrunsvigerCake model with six nn.Linear layers, each with real pretrained weights and biases already assigned, but forward() just returns the input untouched - none of
Search for a command to run...
Articles tagged with #python
Summary half_baked.py defines a BrunsvigerCake model with six nn.Linear layers, each with real pretrained weights and biases already assigned, but forward() just returns the input untouched - none of
Summary The challenge provides four files (Brunner1.jpg, Brunner2.gif, Brunner3.png, Brunner4.bmp) that all report as generic data under file - none of them start with the magic bytes their extension
Summary The challenge ships a single file, activating_neurons.py, defining a small nn.Module called BrunsvigerNet. The model has two linear layers, but forward() only runs the input through the first
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF
Summary Dreaming is a Linux box built around a Pluck CMS install. Brute-forcing the CMS admin login gives access to the admin panel, which is then abused via a known authenticated file-upload RCE (CVE

Overview The Hollow Shell is a Flask app ("Shoreline Display - Room Service") that lets an authenticated concierge upload themed "shells" as .zip archives. Each archive must contain a shell.json manif
