[beachhead]

what are popular ROP compilers used for then?

[saagarjha]

CTF challenges mostly

[beachhead]

so they're used in combination with already known exploits but you're saying no one uses them during the development of exploits?

[saagarjha]

No, they’re mostly toys and demos. They’re not an accurate representation of real-world exploit development.

[beachhead]

oh i must be confused about what a CTF challenge is

[saagarjha]

CTF challenges are to cooking competitions what exploit development is to being a restaurant cook. There are time limits, practicality is less of a concern, and everyone knows that toy constraints are added because nobody wants to watch you stare at IDA for three weeks