See Link

Original writeup (https://codingmace.gitbook.io/masterward/ctf/2021/redpwn-2021#beginner-generic-pwn-number-0).