Uploaded May 2017 | Updated September 2026, 2 weeks ago

---

hackarcana.com ← check out my courses and CTF challenges ​  
The basics + my tips and tricks on ROP.
05:20 - Start
11:20 - Shout-outs
13:50 - Windows bug from @natashenka & @taviso
15:45 - Mission 002 solutions
24:30 - Questions
27:43 - ROP
1:20:30 - Questions
1:25:20 - Final words
1:26:33 - Mission 003
(thx piomar123 for providing the above!)

Mission 002 solutions:
docs.google.com/presentation/d/1Glx-GvJHfP2PAEt8UtTBTOJtbP5CuNdFsX77clC7q9o/pub

LiveOverflow: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w
MurmusCTF: youtube.com/channel/UCUB9vOGEUpw7IKJRoR4PK-A
RetroGameModz: youtube.com/user/RetroGameModz

Agner Fog calling conventions: agner.org/optimize/calling_conventions.pdf

Gynvael's return-oriented exploiting blog post:
http://gynvael.coldwind.pl/?id=149

Link from uafio on irc: github.com/david942j/one_gadget

Link from RedabDev:
0xabe.io/howto/exploit/2016/03/30/Radare2-of-the-Lost-Magic-Gadget.html
​  
--- Links:
hackarcana.com ← my courses, articles, and CTF challenges
discord.gg/hackarcana ← hackArcana discord
https://gynvael.coldwind.pl/discord ← my / Paged Out! discord
https://pagedout.institute/ ← my Paged Out! magazine
https://gynvael.coldwind.pl/ ← my blog
https://bsky.app/profile/gynvael.bsky.social ← my Bluesky

--- Music in intro/outro:
TheFatRat - Monody feat. Laura Brehm
Watch the official music video: tinyurl.com/monodytfr
Listen to "Monody": thefatrat.ffm.to/monody
Follow TheFatRat: https://ffm.bio/thefatrat

nervous_testpilot - Office (Frozen Cortext Original Soundtrack)
nervous_testpilot - Our Heroes (Frozen Cortext Original Soundtrack)
nervous_testpilot - Focus (Frozen Synapse Original Soundtrack)
soundcloud.com/nervous_testpilot
nervoustestpilot.bandcamp.com

Stellardrone - Between the Rings
stellardrone.bandcamp.com/album/between-the-rings
soundcloud.com/stellardrone/between-the-rings
youtube.com/@StellardroneMusic

--- Team:
Shoutout and big thanks to my team who have helped me with livestreams and IRC/Discord over the years!
→ foxtrot_charlie
→ KrzaQ
→ masakra
→ hebi
→ maryush
→ disconnect3d