Rating:
### TL;DRCraft a malicious cookie via Padding Oracle to bypass a whitelist and do Command Injection to extract `flag.txt`.
I don't remember
