0x7000 · Exploitation Techniques
Returning into libc: the ret2libc Technique
NX is on and the binary is tiny, but libc is mapped and full of useful code. Leak its base past ASLR, then return straight into system("/bin/sh") — a full two-stage pwntools walkthrough.