$ GTFOBins

BrunnerCTF 2026 Easy Boot2Root

Brunner Mifflin (Root)

IT terminal creds + sudo NOPASSWD on /usr/bin/mail. GTFOBins payload spawns a root shell for the flag.

#BrunnerCTF2026#Boot2Root#Easy#Sudo#Mail#GTFOBins