Rating:

Original writeup (http://rawsec.ml/en/BSides-San-Francisco-CTF-2017-write-ups/#30-easyauth-Web).