As discussed in #22.
Close #22
Taken from https://github.com/InsecurityAsso/inshack-2018/blob/master/web/curler/exploit/exploit