> as an attacker can't simply load an executable payload (typically, shellcode) in the address space of the exploited program and jump to it... Very interestin

> as an attacker can't simply load an executable payload (typically, shellcode) in the address space of the exploited program and jump to it... Very interesting read on how this works in practice: https://www.corelan.be/index.php/2010/06/16/exploit-writing-tutorial-part-10-chaining-dep-with-rop-the-rubikstm-cube/ https://www.corelan.be/index.php/2010/06/16/exploit-writing-...