TL; DR. Put a ROP chain and sigreturn frame on the stack. To make the initial `sigreturn` syscall, return to the beginning of the program and submit 15 bytes (to set `rax = 15`).
Original writeup (https://nave1337.herokuapp.com/index.html#os2021_echo).
