Original writeup (http://codezen.fr/2013/02/19/gits-2013-ctf-pwnables-250-question-10-back2skool-write-up/).