Organized in order of relevancy.

#always applicable

#one_gadget

#ret2dlresolve

#stack pivot

#environ leak + ROP

#exit functions list

#tls dtors list

#stdout wide vtable

#binary GOT overwrite

#pthread async

#house of muney

#custom printf functions

#link_map->l_addr

#linker stack mprotect

#older techniques

#libc GOT overwrite

#setcontext

#FILE vtables

#allocator hooks