http://buer.haus/2016/05/01/google-ctf-web-5-wallowing-wallabies-part-three/

Original writeup (http://buer.haus/2016/05/01/google-ctf-web-5-wallowing-wallabies-part-three/).