Full writeup with detailed explanation. Wrote the solver in python using Pwntools and used syscalls, mmap, getcwd, read, write, getdents.