Random value is buffer stack address and can be jumped to using the buffer-overflow technique. The nc flag is not set so the pwnlib shellcraft module is used to generate /bin/sh shellcode.