Locally, I have been able to get rip control but it seems all do not work on remote. Any hint on how to get control would be appreciated.

Locally Methods tried:
Changing the pci_ops -> Worked locally failed remote
Getting stack and rop -> Worked locally and failed on remote; Even after leaking the right return address.