Hash length extension attack solved using HashPump.

Original writeup (https://fbesnard.com/2018/06/17/Viettel-Mates-CTF-2018-Viettel-Store/).