More details:  http://81glntd.blogspot.com/2015/09/writeup-web300-mmactf-2015.html

Original writeup (http://81glntd.blogspot.com/2015/09/writeup-web300-mmactf-2015.html).