Please, do not write just a link to original writeup here.

Original writeup (http://neolex-security.fr/writeup/junior-34c3ctfgit-wrapping-factorypwn/).