http://blog.dragonsector.pl/2017/03/0ctf-2017-easiestprintf-pwn-150.html

Original writeup (http://blog.dragonsector.pl/2017/03/0ctf-2017-easiestprintf-pwn-150.html).