How to find the libc version without having its local copy.

How to bypass the stack canary with . (dot) and scanf.

How to perform the attack against the binary with randomized addresses of libaries in memory - ret2libc & pwntools by example.