# ROP

- [Stack Alignment](/ctfnote/pwn/linux-exploitation/rop/stack-alignment.md)
- [ret2text](/ctfnote/pwn/linux-exploitation/rop/ret2text.md)
- [ret2syscall](/ctfnote/pwn/linux-exploitation/rop/ret2syscall.md): Set register values => call "int 0x80" (x86) or "syscall" (x86\_64)
- [ret2libc](/ctfnote/pwn/linux-exploitation/rop/ret2libc.md): Leak a function address from libc => Compute libc base address => call system("/bin/sh") or use one\_gadget
- [ret2csu](/ctfnote/pwn/linux-exploitation/rop/ret2csu.md)
- [BROP](/ctfnote/pwn/linux-exploitation/rop/brop.md)
- [SROP](/ctfnote/pwn/linux-exploitation/rop/srop.md)
- [Stack Pivot](/ctfnote/pwn/linux-exploitation/rop/stack-pivot.md)