Insecure Deserialization in JavaScript: GoogleCTF 2022 Web/HORKOS Writeup – Huli

https://blog.huli.tw/2022/07/11/en/googlectf-2022-horkos-writeup/