Thanks @deviate, I struggled to find an address where I could write my string, your comment was the last piece I needed to solve the puzzle.
Also, thanks @ecdo for creating a easy box to learn R*P, even though it required a bit of manual labour since ret2libc from the tutorials out there didn’t work