A TU Wien CTF where Sysops Klaus left the keys in the cron job
LFI on a meme gallery, a localhost-only password reset service, a world-writable cron script, and way too many rabbit holes — plus a bonus on the intended log poisoning path I griefed myself out of.