Original writeup (https://jagsec-writeups.blogspot.com/2024/01/uoftctf-write-up-misc-out-of-bucket.html).