See my blog post for the writeup.

Original writeup (https://aojanzen.github.io/2022/03/31/picoctf_basic_file_exploit.html#more).