https://rawsec.ml/en/NeverLAN-CTF-2018-writeups/#100-ajax-not-soap-web

Original writeup (https://rawsec.ml/en/NeverLAN-CTF-2018-writeups/#100-ajax-not-soap-web).