Original writeup (http://wapiflapi.github.io/2014/04/30/getting-a-shell-on-fruits-bkpctf-2014/).