return to printf leak libc offset

control rip to libc one_gadget

Original writeup (https://gist.github.com/swt02026/a3cc69ff27f78e8d6fe25058dd91615c).