http://uaf.io/exploitation/2016/08/05/openCTF-tyro_shellcode2.html

Original writeup (http://uaf.io/exploitation/2016/08/05/openCTF-tyro_shellcode2.html).