There is a vulnerable C program under rop folder. Are you going to exploit the vul.c by ROP? So where is the exp?