Rating:
https://github.com/0x90r00t/Write-Ups/blob/master/THC2017/heapboard/solve.py
I don't remember