Escaping a space-stripping shell with no PATH using brace expansion and absolute paths
Carving a PNG plus ZIP plus PDF polyglot to reassemble a three-part flag
Polluting a Python module global through a recursive merge to flip the give_flag switch and unlock the flag