The Guestbook — TryHackMe Hacker Holidays 2026 Day 13 Writeup

Day 13 walkthrough: /vera/activity shows every tool call VERA makes. Indirect prompt injection reaches the override: tool, which runs /bin/sh. Flags redacted.