Original writeup (http://singularityctf.blogspot.com/2014/05/first-of-all-lets-check-headersdata.html).