overwrite `_rtld_golbal+2312` with `/bin/sh` and overwrite `_rtld_golbal+3834` with address of `system`

Original writeup (http://taqini.space/2020/04/13/ByteBanditsCTF-Pwn-Writeup/#write).