RSI = 0x1337beef RSP -> 0xffff0028: 0x400d00 // where we want the rsi gadget's ret to jump to now that rdi and rsi are controlledMost programs don't have a convenient give_shell function however, so we need to find a way to manually invoke system or another exec function to get us our shell.Packed with top tips and resources from paediatricians of