Tags: web 

Rating:

Exploiting weird UTF-8 handling in PHP and bypassing an AppArmor policy.

Original writeup (https://github.com/dfyz/ctf-writeups/blob/master/hxp-2020/heiko).