├── ARMv5 ├── 0-ret2win │ ├── flag.txt │ ├── ret2win_armv5 │ └── solve.py ├── 1-split │ ├── flag.txt │ ├── solve.py │ └── split_armv5 ├── 2-callme │ ├── callme_armv5 │ ├── callme_armv5-hf │ ├── encrypted_flag.dat │ ├── key1.dat │ ├── key2.dat │ ├── libcallme_armv5-hf.so │ ├── libcallme_armv5.so │ └── solve.py ├── 3-write4 │ ├── flag.txt │ ├── libwrite4_armv5-hf.so │ ├── libwrite4_armv5.so │ ├── solve.py │ ├── write4_armv5 │ └── write4_armv5-hf ├── 4-badchars │ ├── badchars_armv5 │ ├── badchars_armv5-hf │ ├── flag.txt │ ├── libbadchars_armv5-hf.so │ ├── libbadchars_armv5.so │ └── solve.py ├── 5-fluff │ ├── flag.txt │ ├── fluff_armv5 │ ├── fluff_armv5-hf │ ├── libfluff_armv5-hf.so │ ├── libfluff_armv5.so │ └── solve.py ├── 6-pivot │ ├── flag.txt │ ├── libpivot_armv5-hf.so │ ├── libpivot_armv5.so │ ├── pivot_armv5 │ └── pivot_armv5-hf └── 7-ret2csu │ ├── encrypted_flag.dat │ ├── key.dat │ ├── libret2csu_armv5-hf.so │ ├── libret2csu_armv5.so │ ├── ret2csu_armv5 │ ├── ret2csu_armv5-hf │ └── solve.py ├── MIPS ├── 0-ret2win │ ├── flag.txt │ ├── ret2win_mipsel │ └── solve.py ├── 1-split │ ├── flag.txt │ ├── solve.py │ └── split_mipsel ├── 2-callme │ ├── callme_mipsel │ ├── encrypted_flag.dat │ ├── key1.dat │ ├── key2.dat │ ├── libcallme_mipsel.so │ └── solve.py ├── 3-write4 │ ├── flag.txt │ ├── libwrite4_mipsel.so │ ├── solve.py │ └── write4_mipsel ├── 4-badchars │ ├── badchars_mipsel │ ├── flag.txt │ ├── libbadchars_mipsel.so │ └── solve.py ├── 5-fluff │ ├── flag.txt │ ├── fluff_mipsel │ └── libfluff_mipsel.so ├── 6-pivot │ ├── flag.txt │ ├── libpivot_mipsel.so │ └── pivot_mipsel └── 7-ret2csu │ ├── encrypted_flag.dat │ ├── key.dat │ ├── libret2csu_mipsel.so │ ├── ret2csu_mipsel │ └── solve.py ├── README.md ├── x64 ├── 0-ret2win │ ├── flag.txt │ ├── ret2win │ └── solve.py ├── 1-split │ ├── flag.txt │ ├── solve.py │ └── split ├── 2-callme │ ├── callme │ ├── encrypted_flag.dat │ ├── key1.dat │ ├── key2.dat │ ├── libcallme.so │ └── solve.py ├── 3-write4 │ ├── flag.txt │ ├── libwrite4.so │ ├── solve.py │ └── write4 ├── 4-badchars │ ├── badchars │ ├── flag.txt │ ├── libbadchars.so │ └── solve.py ├── 5-fluff │ ├── flag.txt │ ├── fluff │ ├── libfluff.so │ └── solve.py ├── 6-pivot │ ├── flag.txt │ ├── libpivot.so │ ├── pivot │ └── solve.py └── 7-ret2csu │ ├── encrypted_flag.dat │ ├── key.dat │ ├── libret2csu.so │ ├── ret2csu │ └── solve.py └── x86 ├── 0-ret2win ├── flag.txt ├── ret2win32 └── solve.py ├── 1-split ├── flag.txt ├── solve.py └── split32 ├── 2-callme ├── callme32 ├── encrypted_flag.dat ├── key1.dat ├── key2.dat ├── libcallme32.so └── solve.py ├── 3-write4 ├── flag.txt ├── libwrite432.so ├── solve.py └── write432 ├── 4-badchars ├── badchars32 ├── flag.txt ├── libbadchars32.so └── solve.py ├── 5-fluff ├── flag.txt ├── fluff32 ├── libfluff32.so └── solve.py └── 6-pivot ├── flag.txt ├── libpivot32.so ├── pivot32 └── solve.py /ARMv5/0-ret2win/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{34sY_ret2wn_1n_ARM!!} 2 | -------------------------------------------------------------------------------- /ARMv5/0-ret2win/ret2win_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/0-ret2win/ret2win_armv5 -------------------------------------------------------------------------------- /ARMv5/0-ret2win/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/0-ret2win/solve.py -------------------------------------------------------------------------------- /ARMv5/1-split/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{split_ret2libc_in_ARM} 2 | -------------------------------------------------------------------------------- /ARMv5/1-split/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/1-split/solve.py -------------------------------------------------------------------------------- /ARMv5/1-split/split_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/1-split/split_armv5 -------------------------------------------------------------------------------- /ARMv5/2-callme/callme_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/callme_armv5 -------------------------------------------------------------------------------- /ARMv5/2-callme/callme_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/callme_armv5-hf -------------------------------------------------------------------------------- /ARMv5/2-callme/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/encrypted_flag.dat -------------------------------------------------------------------------------- /ARMv5/2-callme/key1.dat: -------------------------------------------------------------------------------- 1 |  2 |  -------------------------------------------------------------------------------- /ARMv5/2-callme/key2.dat: -------------------------------------------------------------------------------- 1 |  -------------------------------------------------------------------------------- /ARMv5/2-callme/libcallme_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/libcallme_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/2-callme/libcallme_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/libcallme_armv5.so -------------------------------------------------------------------------------- /ARMv5/2-callme/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/2-callme/solve.py -------------------------------------------------------------------------------- /ARMv5/3-write4/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{WR1t34_in_ARM_data_section} 2 | -------------------------------------------------------------------------------- /ARMv5/3-write4/libwrite4_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/3-write4/libwrite4_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/3-write4/libwrite4_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/3-write4/libwrite4_armv5.so -------------------------------------------------------------------------------- /ARMv5/3-write4/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/3-write4/solve.py -------------------------------------------------------------------------------- /ARMv5/3-write4/write4_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/3-write4/write4_armv5 -------------------------------------------------------------------------------- /ARMv5/3-write4/write4_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/3-write4/write4_armv5-hf -------------------------------------------------------------------------------- /ARMv5/4-badchars/badchars_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/4-badchars/badchars_armv5 -------------------------------------------------------------------------------- /ARMv5/4-badchars/badchars_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/4-badchars/badchars_armv5-hf -------------------------------------------------------------------------------- /ARMv5/4-badchars/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{XORing_1n_ARM_d4ta_s3ct10n} 2 | -------------------------------------------------------------------------------- /ARMv5/4-badchars/libbadchars_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/4-badchars/libbadchars_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/4-badchars/libbadchars_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/4-badchars/libbadchars_armv5.so -------------------------------------------------------------------------------- /ARMv5/4-badchars/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/4-badchars/solve.py -------------------------------------------------------------------------------- /ARMv5/5-fluff/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{ARM_0b5cur3_1n5truct10n5!!} 2 | -------------------------------------------------------------------------------- /ARMv5/5-fluff/fluff_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/5-fluff/fluff_armv5 -------------------------------------------------------------------------------- /ARMv5/5-fluff/fluff_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/5-fluff/fluff_armv5-hf -------------------------------------------------------------------------------- /ARMv5/5-fluff/libfluff_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/5-fluff/libfluff_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/5-fluff/libfluff_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/5-fluff/libfluff_armv5.so -------------------------------------------------------------------------------- /ARMv5/5-fluff/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/5-fluff/solve.py -------------------------------------------------------------------------------- /ARMv5/6-pivot/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{a_placeholder_32byte_flag!} 2 | -------------------------------------------------------------------------------- /ARMv5/6-pivot/libpivot_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/6-pivot/libpivot_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/6-pivot/libpivot_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/6-pivot/libpivot_armv5.so -------------------------------------------------------------------------------- /ARMv5/6-pivot/pivot_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/6-pivot/pivot_armv5 -------------------------------------------------------------------------------- /ARMv5/6-pivot/pivot_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/6-pivot/pivot_armv5-hf -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/encrypted_flag.dat -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/key.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/key.dat -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/libret2csu_armv5-hf.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/libret2csu_armv5-hf.so -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/libret2csu_armv5.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/libret2csu_armv5.so -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/ret2csu_armv5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/ret2csu_armv5 -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/ret2csu_armv5-hf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/ret2csu_armv5-hf -------------------------------------------------------------------------------- /ARMv5/7-ret2csu/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/ARMv5/7-ret2csu/solve.py -------------------------------------------------------------------------------- /MIPS/0-ret2win/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{34sY_ret2wn_1n_MIPS!!} 2 | -------------------------------------------------------------------------------- /MIPS/0-ret2win/ret2win_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/0-ret2win/ret2win_mipsel -------------------------------------------------------------------------------- /MIPS/0-ret2win/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/0-ret2win/solve.py -------------------------------------------------------------------------------- /MIPS/1-split/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{split_ret2libc_in_MIPS} 2 | -------------------------------------------------------------------------------- /MIPS/1-split/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/1-split/solve.py -------------------------------------------------------------------------------- /MIPS/1-split/split_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/1-split/split_mipsel -------------------------------------------------------------------------------- /MIPS/2-callme/callme_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/2-callme/callme_mipsel -------------------------------------------------------------------------------- /MIPS/2-callme/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/2-callme/encrypted_flag.dat -------------------------------------------------------------------------------- /MIPS/2-callme/key1.dat: -------------------------------------------------------------------------------- 1 |  2 |  -------------------------------------------------------------------------------- /MIPS/2-callme/key2.dat: -------------------------------------------------------------------------------- 1 |  -------------------------------------------------------------------------------- /MIPS/2-callme/libcallme_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/2-callme/libcallme_mipsel.so -------------------------------------------------------------------------------- /MIPS/2-callme/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/2-callme/solve.py -------------------------------------------------------------------------------- /MIPS/3-write4/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{WR1t3_in_MIPS_data_section} 2 | -------------------------------------------------------------------------------- /MIPS/3-write4/libwrite4_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/3-write4/libwrite4_mipsel.so -------------------------------------------------------------------------------- /MIPS/3-write4/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/3-write4/solve.py -------------------------------------------------------------------------------- /MIPS/3-write4/write4_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/3-write4/write4_mipsel -------------------------------------------------------------------------------- /MIPS/4-badchars/badchars_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/4-badchars/badchars_mipsel -------------------------------------------------------------------------------- /MIPS/4-badchars/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{XORing_MIPS_d4ta_s3ct10n!!} 2 | -------------------------------------------------------------------------------- /MIPS/4-badchars/libbadchars_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/4-badchars/libbadchars_mipsel.so -------------------------------------------------------------------------------- /MIPS/4-badchars/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/4-badchars/solve.py -------------------------------------------------------------------------------- /MIPS/5-fluff/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{a_placeholder_32byte_flag!} 2 | -------------------------------------------------------------------------------- /MIPS/5-fluff/fluff_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/5-fluff/fluff_mipsel -------------------------------------------------------------------------------- /MIPS/5-fluff/libfluff_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/5-fluff/libfluff_mipsel.so -------------------------------------------------------------------------------- /MIPS/6-pivot/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{a_placeholder_32byte_flag!} 2 | -------------------------------------------------------------------------------- /MIPS/6-pivot/libpivot_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/6-pivot/libpivot_mipsel.so -------------------------------------------------------------------------------- /MIPS/6-pivot/pivot_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/6-pivot/pivot_mipsel -------------------------------------------------------------------------------- /MIPS/7-ret2csu/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/7-ret2csu/encrypted_flag.dat -------------------------------------------------------------------------------- /MIPS/7-ret2csu/key.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/7-ret2csu/key.dat -------------------------------------------------------------------------------- /MIPS/7-ret2csu/libret2csu_mipsel.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/7-ret2csu/libret2csu_mipsel.so -------------------------------------------------------------------------------- /MIPS/7-ret2csu/ret2csu_mipsel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/7-ret2csu/ret2csu_mipsel -------------------------------------------------------------------------------- /MIPS/7-ret2csu/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/MIPS/7-ret2csu/solve.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/README.md -------------------------------------------------------------------------------- /x64/0-ret2win/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{ret2win_in_x64_rip_save} 2 | -------------------------------------------------------------------------------- /x64/0-ret2win/ret2win: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/0-ret2win/ret2win -------------------------------------------------------------------------------- /x64/0-ret2win/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/0-ret2win/solve.py -------------------------------------------------------------------------------- /x64/1-split/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{split_ret2libc_in_x64} 2 | -------------------------------------------------------------------------------- /x64/1-split/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/1-split/solve.py -------------------------------------------------------------------------------- /x64/1-split/split: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/1-split/split -------------------------------------------------------------------------------- /x64/2-callme/callme: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/2-callme/callme -------------------------------------------------------------------------------- /x64/2-callme/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/2-callme/encrypted_flag.dat -------------------------------------------------------------------------------- /x64/2-callme/key1.dat: -------------------------------------------------------------------------------- 1 |  2 |  -------------------------------------------------------------------------------- /x64/2-callme/key2.dat: -------------------------------------------------------------------------------- 1 |  -------------------------------------------------------------------------------- /x64/2-callme/libcallme.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/2-callme/libcallme.so -------------------------------------------------------------------------------- /x64/2-callme/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/2-callme/solve.py -------------------------------------------------------------------------------- /x64/3-write4/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{WR1t34_in_x64_data_section} 2 | -------------------------------------------------------------------------------- /x64/3-write4/libwrite4.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/3-write4/libwrite4.so -------------------------------------------------------------------------------- /x64/3-write4/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/3-write4/solve.py -------------------------------------------------------------------------------- /x64/3-write4/write4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/3-write4/write4 -------------------------------------------------------------------------------- /x64/4-badchars/badchars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/4-badchars/badchars -------------------------------------------------------------------------------- /x64/4-badchars/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{XORing_1n_d4ta_s3ct10n_x64} 2 | -------------------------------------------------------------------------------- /x64/4-badchars/libbadchars.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/4-badchars/libbadchars.so -------------------------------------------------------------------------------- /x64/4-badchars/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/4-badchars/solve.py -------------------------------------------------------------------------------- /x64/5-fluff/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{x64_0b5cur3_1n5truct10n5!!} 2 | -------------------------------------------------------------------------------- /x64/5-fluff/fluff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/5-fluff/fluff -------------------------------------------------------------------------------- /x64/5-fluff/libfluff.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/5-fluff/libfluff.so -------------------------------------------------------------------------------- /x64/5-fluff/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/5-fluff/solve.py -------------------------------------------------------------------------------- /x64/6-pivot/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{st4ck_p1v0t1ng_in_x64!!} 2 | -------------------------------------------------------------------------------- /x64/6-pivot/libpivot.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/6-pivot/libpivot.so -------------------------------------------------------------------------------- /x64/6-pivot/pivot: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/6-pivot/pivot -------------------------------------------------------------------------------- /x64/6-pivot/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/6-pivot/solve.py -------------------------------------------------------------------------------- /x64/7-ret2csu/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/7-ret2csu/encrypted_flag.dat -------------------------------------------------------------------------------- /x64/7-ret2csu/key.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/7-ret2csu/key.dat -------------------------------------------------------------------------------- /x64/7-ret2csu/libret2csu.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/7-ret2csu/libret2csu.so -------------------------------------------------------------------------------- /x64/7-ret2csu/ret2csu: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/7-ret2csu/ret2csu -------------------------------------------------------------------------------- /x64/7-ret2csu/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x64/7-ret2csu/solve.py -------------------------------------------------------------------------------- /x86/0-ret2win/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{ret2win_in_x86_eip_save} 2 | -------------------------------------------------------------------------------- /x86/0-ret2win/ret2win32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/0-ret2win/ret2win32 -------------------------------------------------------------------------------- /x86/0-ret2win/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/0-ret2win/solve.py -------------------------------------------------------------------------------- /x86/1-split/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{split_ret2libc_in_x86} 2 | -------------------------------------------------------------------------------- /x86/1-split/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/1-split/solve.py -------------------------------------------------------------------------------- /x86/1-split/split32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/1-split/split32 -------------------------------------------------------------------------------- /x86/2-callme/callme32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/2-callme/callme32 -------------------------------------------------------------------------------- /x86/2-callme/encrypted_flag.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/2-callme/encrypted_flag.dat -------------------------------------------------------------------------------- /x86/2-callme/key1.dat: -------------------------------------------------------------------------------- 1 |  2 |  -------------------------------------------------------------------------------- /x86/2-callme/key2.dat: -------------------------------------------------------------------------------- 1 |  -------------------------------------------------------------------------------- /x86/2-callme/libcallme32.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/2-callme/libcallme32.so -------------------------------------------------------------------------------- /x86/2-callme/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/2-callme/solve.py -------------------------------------------------------------------------------- /x86/3-write4/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{WR1t34_in_x86_data_section} 2 | -------------------------------------------------------------------------------- /x86/3-write4/libwrite432.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/3-write4/libwrite432.so -------------------------------------------------------------------------------- /x86/3-write4/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/3-write4/solve.py -------------------------------------------------------------------------------- /x86/3-write4/write432: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/3-write4/write432 -------------------------------------------------------------------------------- /x86/4-badchars/badchars32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/4-badchars/badchars32 -------------------------------------------------------------------------------- /x86/4-badchars/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{XORing_1n_d4ta_s3ct10n_x86} 2 | -------------------------------------------------------------------------------- /x86/4-badchars/libbadchars32.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/4-badchars/libbadchars32.so -------------------------------------------------------------------------------- /x86/4-badchars/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/4-badchars/solve.py -------------------------------------------------------------------------------- /x86/5-fluff/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{x86_0b5cur3_1n5truct10n5!!} 2 | -------------------------------------------------------------------------------- /x86/5-fluff/fluff32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/5-fluff/fluff32 -------------------------------------------------------------------------------- /x86/5-fluff/libfluff32.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/5-fluff/libfluff32.so -------------------------------------------------------------------------------- /x86/5-fluff/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/5-fluff/solve.py -------------------------------------------------------------------------------- /x86/6-pivot/flag.txt: -------------------------------------------------------------------------------- 1 | ROPE{st4ck_p1v0t1ng_in_x86!!} 2 | -------------------------------------------------------------------------------- /x86/6-pivot/libpivot32.so: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/6-pivot/libpivot32.so -------------------------------------------------------------------------------- /x86/6-pivot/pivot32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/6-pivot/pivot32 -------------------------------------------------------------------------------- /x86/6-pivot/solve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xSoEasY/ROPemporium/HEAD/x86/6-pivot/solve.py --------------------------------------------------------------------------------