OMFG THERES ONE MORE!!!!!

• This one is kinda like the holy grail of VA defeet1ng

• HOORAY RET2ESP!!!!!!!!!

• • Its all because of the way the stack is organized.
  • When a function exits and the ret instruction is executed, the stack pointer is automatically set to right after the ret address on the stack.