Rating:

Original writeup (https://0xabe.io/ctf/exploit/2016/05/23/DEFCONCTF-heapfun4u.html).