0x7000 · Exploitation Techniques
Hijacking the GOT: Redirecting a libc Call
Lazy binding leaves the Global Offset Table writable. Aim an arbitrary write at a GOT entry, turn puts() into system(), then enable Full RELRO and watch the same write fault instantly.