Leakless format string exploitation
Reading and printing the flag with a ROP chain
Doing ROP without useful gadgets
Linear cryptanalysis
I did heap!!!