Jasper Yu says to YSITD https://github.com/seadog007/2018_csie_ctf_tw/blob/master/HW/0x01_shellsort2.0/exploit.py