See the link.

Original writeup (https://rawsec.ml/en/HackDatKiwi-2017-write-ups/#50-md5-games-1-web).