Ropemporium x86_64 fluff
fluff Consigne Working backwards
Once we’ve employed our usual drills of checking protections and searching for interesting symbols & strings, we can think about what we’re trying to acheive and plan our chain. A solid approach is to work backwards: we’ll need a write gadget - for example mov [reg], reg or something equivalent - to make the actual write, so we can start there. Do it!
There’s not much more to this challenge, we just have to think about ways to move data into the registers we want to control.