Rating:

Original writeup (https://jbzteam.github.io/pwn/SecurityFest2017-Puzzle-Palace).