Insane CTFZone: web-card explained
The article describes the steps to solve the web-card task designed for CTFZone 2019. Being a tribute to the XML format, the task featured a zero-day, an unusual way to exploit XXE, and a remarkable chain of vulnerabilities