TL;DR:
**My exploit**```python@exec@inputclass X:    pass```
Full writeup, including an analysis of a collection of different solutions and approaches: <https://ur4ndom.dev/posts/2022-07-04-gctf-treebox/>