ROP

EAX without gadgets

Control eax (without eax gadgets) using syscalls:

• read: Number of bytes read.
• write: Number of bytes written.
• umask: Returns the value of the mask.
• alarm: Seconds between two alarms.