@t4nt said:
The first vuln seems almost too obvious, but I can’t come up with a working proof in spite of all I’ve read about related exploits. Feels like I’ve read too much in one sitting and lost focus.
Does anyone have a lead on some good study material?
I am in an identical position I think. I’ve tried a few things which I thought would work but so far, nothing.
It’s a bit frustrating because I can’t tell if it is my own incompetence or if the approach is wrong 
Still, onwards and upwards, once more unto the breach (etc).