Rating:

Original writeup (http://rawsec.ml/en/IceCTF-55-Demo-Pwn/).