Original writeup (https://pwnthemole.github.io/misc/2018/12/22/xmasctkrampus.html).