TL;DR: Basically a 0day challenge to exploit PyYAML deserialization.

[Full Writeup here](https://hackmd.io/@harrier/uiuctf20)