ctf/2026/cscg/web/innovation-at-work/notes.md

user object at: /db/13550350a8681c84c861aac2e5b440161c2b33a3e4f302ac680ca5b686de48de:13550350a8681c84c861aac2e5b440161c2b33a3e4f302ac680ca5b686de48de

Flag is stored at: /db/938c2a3dfa19c1a46821bed04912db62f9fdb134737804213cd67099482dc640:random_password_hash

Execution: exec lighttpd -f /lighttpd.conf -D => use lighttpd.conf and do not deamonize

server.modules = (
    "mod_cgi",
)
server.document-root = "/www"
server.port = 8000

user = "www-data"

cgi.assign = (
    ".cgi" => "/usr/bin/bash"
)