Rating:

Original writeup (http://rawsec.ml/en/IceCTF-10-Spotlight-Web/).