Use call by pointer to pointer return rop chain
Modify the gadgets in exec() search
Bypass badbyte gadgets