> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop.md).

# ROP

- [Stack Alignment](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/stack-alignment.md)
- [ret2text](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/ret2text.md)
- [ret2syscall](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/ret2syscall.md): Set register values => call "int 0x80" (x86) or "syscall" (x86\_64)
- [ret2libc](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/ret2libc.md): Leak a function address from libc => Compute libc base address => call system("/bin/sh") or use one\_gadget
- [ret2csu](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/ret2csu.md)
- [BROP](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/brop.md)
- [SROP](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/srop.md)
- [Stack Pivot](https://ret2basic.gitbook.io/ctfnote/pwn/linux-exploitation/rop/stack-pivot.md)