A single gadget that can be used to win a program.

  • chown
  • chmod
  • execve("/bin/sh")

These magic gadgets often require some register.stack setup before being called to work