Original writeup (http://h4des.org/blog/index.php?/archives/336-csaw-2013-web-300-write-up.html).