http://fadec0d3.blogspot.com/2017/02/alexctf-2017-forensics-scripting.html

Original writeup (http://fadec0d3.blogspot.com/2017/02/alexctf-2017-forensics-scripting.html).