If you read my previous writeup about rop32 then this one should be easy for you, i just need to remind you about the registers before execute syscall rax == 0x3b (59 in dec)
rdi == point to address contain ‘/bin/sh’
rsi == NULL
rdx == NULL now we need…