Original writeup (https://tcode2k16.github.io/blog/posts/2019-05-19-rctf-writeup/#shellcoder-pwn).