Re: Jump back to shellcode Windows overflow

You need to put a jmp instruction to jump back to your shellcode (which should be located after the return address). Try something like this: [NOPs][Shellcode][Padding (ebp, local vars, etc.)][Return address = pointer to a JMP ESP][jmp 0-padding-shellcode_len-5]

Note the first thing your shellcode should do is add esp, 0xffffeff0 (which is the same as subtracting esp by ~4K) so that when you push stuff onto the stack you're not corrupting your shellcode

Matt

On Mon, 22 Apr 2003 chaboyd77@yahoo.com wrote:

>
>
> I'm practicing developing Windows Buffer Overflows and
Received on Tue Apr 22 15:55:20 2003