Search the binary for /bin/sh :
: Binary / Reverse Engineering – pwn / exploitation Points : 22 (in the original CTF) Author of Write‑up : Your‑Name (feel free to adapt / improve) strapondreamer jennifer 22 full
If "strapondreamer jennifer 22 full" refers to a specific piece of content, such as a story, video, or artwork, here are a few steps: Search the binary for /bin/sh : : Binary
The buffer buf is at rsp + 0x10 (after the saved rbp). Therefore the address of the /bin/sh string placed at the very end of our payload is: such as a story
The address of main (useful as a safe “return” address) is: