https://www.rhama.my.id/ctf/web%20hacking/2017/11/20/hxpctf-2017-web150.html

Original writeup (https://www.rhama.my.id/ctf/web%20hacking/2017/11/20/hxpctf-2017-web150.html).