Rating:

Original writeup (https://thegoonies.rocks/csaw-2016-wtf-sh-web/).