1

We have 32bit & 64bit binaries, and in ROP (Return Oriented Programming), we sometimes target RSP/ESP, sometimes RIP/EIP, (maybe) sometimes RBP/EBP (I'm new to this, haven't seen RBP used yet). In ROP Emporium's ret2win challenge, I hit (with the target address) EIP on the 32bit binary, but RSP on the 64bit since I couldn't get my payload to hit RIP.

How do we choose which of the 3 registers to target when making a ROP chain/gadget?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.