Hacking Where to Start with ROP

[Relys]

Ok, so back to the main question: how do I figure out where in memory my buffer gets stored? I am using the stsc bug.

Debugging. There are several options.

• Setting up a similar environment to emulate QEMU.
• Using a devkit.
• Setting up execution handler after using a different exploit.

 

[gudenau]

Debugging. There are several options.

• Setting up a similar environment to emulate QEMU.
• Using a devkit.
• Setting up execution handler after using a different exploit.

Ok, since the only option I have seems to be the emulator; how should I go about setting up QEMU for the Wii U?