https://rawsec.ml/en/NeverLAN-CTF-2018-writeups/#200-ajax-not-borax-web

Original writeup (https://rawsec.ml/en/NeverLAN-CTF-2018-writeups/#200-ajax-not-borax-web).