Looks like these guys solved a puzzle transaction using methods from this post - it is referenced! They too had to do it manually and could use Bitcoin Core to construct the transaction. I'm gonna look at their raw transaction and try to figure out how they did it. Cool topic.

https://btcleak.com/2020/07/19/we-solved-a-p2sh-transaction-puzzle-and-redeemed-bitcoin/

Round 2:

https://btcleak.com/2020/06/16/steal-our-bitcoin-again/

If it's true the addresses are simple P2WPKH and they are simple brainwallets, all you gotta do is use Brainflayer that's been upgraded to work with segwit