Please, do not write just a link to original writeup here.

Original writeup (https://bo8blog.wordpress.com/2017/08/28/hitb2017-pwn-1000levels/).