Full exploit: http://www.hamidx9.ir/solutions/2016/blazectf/postboard/

Original writeup (http://www.hamidx9.ir/blog/2016/01/19/blazectf-2016-writeups.html).