Stack Overflow And Rop

This is a comprehensive playbook for exploiting stack-based buffer overflows on Linux binaries when you need to hijack control flow. It covers the progression from basic return address overwrites through ret2libc, full ROP chain construction, and advanced techniques like ret2csu for setting up three-argument function calls, ret2dlresolve for resolving arbitrary symbols without leaks, and SROP for control of all registers at once. The gadget selection guidance is solid, especially the often-missed x86-64 stack alignment requirement for movaps instructions. It includes concrete payloads for both 32-bit and 64-bit targets and practical tooling comparisons between ROPgadget, ropper, and pwntools. If you're working CTF challenges or analyzing real vulnerabilities where you've got a stack overflow primitive and need to navigate NX, ASLR, and other modern protections, this gives you the patterns.

Install to Claude Code

npx -y skills add yaklang/hack-skills --skill stack-overflow-and-rop --agent claude-code