for those having trouble with the command, try mapping stde** to to stdo** in your exploit. I suspect I know the problem most of you are having with your command, and that should surface it. Feel free to DM if you need a bit more guidance.
Feel free to report as spoiler if that is too big a hint.