category CTF › ROP Emporium
3 posts · browse all
- ROP Emporium: callme Chaining PLT calls with a multi-argument ROP gadget to invoke three functions in sequence
- ROP Emporium: split Building a ROP chain to call system() with a custom string argument
- ROP Emporium: ret2win Classic buffer overflow exploiting a vulnerable read() to redirect execution to a win function