Using CVE-2016-9401

Original writeup (https://david942j.blogspot.tw/2017/03/write-up-boston-key-party-2017-pwn99.html).