rop

RE & Pwn

Return-Oriented Programming (ROP) Against DEP

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

SROP: Sigreturn-Oriented Programming

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

ret2dlresolve: Symbol Resolution Without a libc Leak

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

ret2libc and ret2plt in Depth

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Bypassing NX with mprotect ROP Chains

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

ret2csu: Universal Gadgets in __libc_csu_init

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Stack Pivoting: Migrating Execution to Controlled Memory

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Defeating ASLR: Leaks, Partial Overwrites, and Brute Force

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Return-Oriented Programming (ROP) Fundamentals: From Gadgets to ret2syscall

A practical introduction to ROP: gadgets, ROPgadget, ret2libc, ret2syscall, stack pivots, and the defenses that stop them.
RE & Pwn

Writing Exploits with pwntools: From cyclic to ROP and shellcode

A practical guide to building Linux binary exploits with pwntools: cyclic offsets, ELF parsing, p64, ROP, and shellcraft.