Like the legendary one- 31- line php challenge

62.84.114.238/

On the last step, you’ll need a recently published 0day.

Added at 11:10 UTC: you need to get an RCE.

Added at 15:30 UTC: while the XML parsing bug will not give you an RCE in of itself, it very much can help you win the race and get one!