Should I reverse shell this... libc leaks, but the address changes because the server process is re-executed every time the connection is made... The attack scenario I originally thought of was as follows: Leak libc and close the client Connect to the server again and execute the rop based on the leaked address < - This is the point. Revers