Original writeup (http://capturetheswag.blogspot.com.au/2015/04/plaidctf-qttpd-pwnable-part-1-200-point.html).