> Of the top of my head (not my primary space), a gadget is a piece of code at a known or guessable location that provides specific functionality. > Consequent

> Of the top of my head (not my primary space), a gadget is a piece of code at a known or guessable location that provides specific functionality. > Consequently, modern exploits tend to look like: (1) figure out how memory is laid out, or close enough, (2) calculate where a useful function is, that you can call with arbitrary parameters (aka a gadget), (3) abuse that function to do your bidding by controlling its parameters and the instruction pointer. This is all correct, but generally a gadget is what a snippet of assembly / machine code that you call to get the CPU into a state to call a function. So its less a function and more a set of instructions (anywhere) that are useful. So for example, you might have a gadget to set specific registers with values off the stack so you can call malloc with the correct size, etc.