Full _hot_: Strapondreamer Jennifer 22

The buffer buf is at rsp + 0x10 (after the saved rbp). Therefore the address of the /bin/sh string placed at the very end of our payload is: strapondreamer jennifer 22 full