Here is my validation script:

https://transfer.sh/7vqMg/exploit.py

Thanks for this cool challenge. I unfortunatly got the flag 1 hour after the end :(

Thanks to BitK and XeR :)

SakiiR.