Stack Overflow And Rop

This is a comprehensive playbook for exploiting stack-based buffer overflows on Linux binaries when you need to hijack control flow. It covers the progression from basic return address overwrites through ret2libc, full ROP chain construction, and advanced techniques like ret2csu for setting up three-argument function calls, ret2dlresolve for resolving arbitrary symbols without leaks, and SROP for control of all registers at once. The gadget selection guidance is solid, especially the often-missed x86-64 stack alignment requirement for movaps instructions. It includes concrete payloads for both 32-bit and 64-bit targets and practical tooling comparisons between ROPgadget, ropper, and pwntools. If you're working CTF challenges or analyzing real vulnerabilities where you've got a stack overflow primitive and need to navigate NX, ASLR, and other modern protections, this gives you the patterns.

skills.sh installs: 3.7K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill stack-overflow-and-rop --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Stack Overflow & ROP — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert stack-based exploitation techniques. Covers classic buffer overflow, return-to-libc, ROP chain construction, ret2csu, ret2dlresolve, SROP, stack pivoting, and canary bypass. Distilled from ctf-wiki advanced-rop, real-world CVEs, and CTF competition patterns. Base models often miss the nuance of gadget selection under constrained conditions.

0. RELATED ROUTING

format-string-exploitation — leak canary/libc/PIE base via format string before triggering overflow
binary-protection-bypass — systematic bypass of NX, ASLR, PIE, canary, RELRO
arbitrary-write-to-rce — convert a write primitive (GOT, hooks, vtable) into code execution
heap-exploitation — when the vulnerability is in heap rather than stack

Advanced Reference

SKILL.md on GitHub

Details

Repository: github.com/yaklang/hack-skills
First seen: Jun 3, 2026