This time we are tasked with performing our first memory write. First glance gdb We see that we are given some things to check out like usefulFunction, useful Gadget(our write gadget) ...

The second challenge of ropemporium asks us to use one single gadget to call system and return safely to main. First glance As we can see NX(non executable Stack) is activated which means ...

The first challenge of ropemporium offers us any easy way to get into the art of return-oriented programming. First glance As we can see NX(non executable Stack) is activated which means we ...

The final challenge of ropemporium was a little bit easier than fluff and pivot. It’s sort of an introduction to ret2csu but missing the 2 stage part of leaking and then returning to libc to use t...

This challenge teaches us how to escape limited stack space and pivot to a new stack to jump onto a fresh rop-chain. First glance starting the challenge As we can see the challenge off...

Today i will walk you through ropemporium challenge 6 “fluff”. There was nothing fluffy about this challenge for me. First glance Next up we will go on to find our write primitive and rever...

Now it’s time to call some functions with multiple arguments. First glance gdb As we can see we will again overflow read in the pwnme function to rop our way through 3 functions, as dema...

This challenge marks the first significant step in terms of difficulty. First glance badchars :( So we can’t use any of this chars in our rop chain but this is where we get creative....

So i’ve written a small C-Program that goes by the name of calc. You can find it, like my other stuff, in my github repo. https://github.com/c0zy1/pwn-scripts/tree/main/pwn-scripts/c-projects/cal...