---

Table of contents

• Bypass NX via ret2libc
• Bypass NX via via mprotect()
• Bypass stack canary via format string leak
• Format String
• GOT Overwrite via format string
• Hijack de rand() usando LD_PRELOAD trick
• IOF - Integer Overflow/Underflow
• ImaginaryCTF date2
• PRNG bad seed
• Programacion Orientada a Sigreturn (SROP)
• Protostar - heap2
• ROP emporitum - callme
• ROP emporium - split
• TAMU 2019 - pwn1
• picoCTF - here's a libc
• picoCTF HurryUp wait
• pwnable.kr - passcode
• pwnable.kr - unlink