Ricochet 攻击 Ricochet 在 CTF 攻防竞赛中的应用 Ricochet 在现实生活中的应用 Ricochet for Control Flow Hijacking Exploits Shellcode Transplant ShellSwap: Automatic Shellcode Transplant [1] Previous Approach Previous Approach: Limitation Our Work: ShellSwap Layout Remediation Layout Remediation May Fail Path Kneading Restricting Path Exploration Path Kneading Evaluation Effectiveness Efficiency Conclusion