**tl;dr**: classic gets buffer overflow, no print gadgets, build rop chain to pivot stack to GOT location and call system via `add rax,rdx` and `call rax` gadget. 
Original writeup has the full rop chain with extensive comments.