Rating:

Original writeup (https://github.com/jesux/ctf-write-ups/tree/master/nullcon-2018/exploiting1).