Please, do not write just a link to original writeup here.

Original writeup (https://github.com/xerof4ks/heapwn/blob/master/csaw2017/writeup.md).