MIST Cyberdrill CTF 2025 qualifier round steganography walkthrough

I exploited an IDOR to get cool swag from Achmea.

My story of bypassing File upload feature to achieve Remote Code Execution (RCE) on a Dutch government website.