Rating:
# Baby exploit - HackLu 2018
Too lazy to check which bit to flip. With a padded shellcode i tried to bruteforce all the combinations locally (just 1500 more or less) and it worked also on the remote service :)
The full exploit is [here](exploit.py)!