Using secret mode 31337 we overflow the RIP, make it point to the start of the random pagethat we guessed using the local timewe write a shellcode stub in the page that pivot the execution to a ROP-chain in the heap,which reads a bigger shellcode in the random page and then jumps to itthe last shellcode bypass the seccomp filter using openat and sendfile
Read the exploit.py