Please, do not write just a link to original writeup here.

Original writeup (https://github.com/xerof4ks/heapwn/blob/master/tw2017/notev1.py).