/images/avatar.png

Ropemporium x86_64 fluff

fluff Consigne Working backwards Once we’ve employed our usual drills of checking protections and searching for interesting symbols & strings, we can think about what we’re trying to acheive and plan our chain. A solid approach is to work backwards: we’ll need a write gadget - for example mov [reg], reg or something equivalent - to make the actual write, so we can start there. Do it! There’s not much more to this challenge, we just have to think about ways to move data into the registers we want to control.