We’re back in ret2win territory, but this time without the useful gadgets. How will we populate the rdx register without a pop rdx? … Continue readingROP Emporium | ret2csu Solution

There’s only enough space for a three-link chain on the stack but you’ve been given space to stash a much larger ROP chain elsewhere. Learn how to pivot the stack onto a new location … Continue readingROP Emporium | pivot Solution

The concept here is identical to the write4 challenge. The only difference is we may struggle to find gadgets that will get the job done. If we take the time to consider a different approach we’ll succeed … Continue readingROP Emporium | fluff Solution