Please, do not write just a link to original writeup here.

Original writeup (http://blog.redrocket.club/2018/03/27/VolgaCTF-Forbidden/).