Tags: pwn 

Rating:

Please, do not write just a link to original writeup here.

Original writeup (https://github.com/ABaptista/ctf-solutions/blob/master/security-fest-2017/braindump/exploit.py).