Solution for Zippy task from Confidence Dragonsector CTF.

Bypassing XSS auditor.

There is SQL Injection in Cookie.

Exploit cPickle.loads which deserialize object from untrusted user input session['auth'] inside verifySession() function.

Bypass Python urlparse function

Exploit Mako Templates for Python.

Use XSS Auditor for XSS bypass

SQL Injection because of shift-jis encoding.