Please, do not write just a link to original writeup here.

Original writeup (https://blog.eadom.net/writeups/qemu-escape-vm-escape-from-0ctf-2017-finals-writeup/).