L3akCTF 2026 - Squid

A complex server-side web challenge showing off some parser differentials and a new technique. It was followed by a really interesting race condition technique involving file descriptors to read environment variables in Flask.