Everything you need to exploit overly permissive crossdomain.xml files