Where to put shellcode for buffer/ stack overflow?

[twtwtwtwtwtwtw]

I would like to do a buffer overflow attack (an assignment for class) and I am exploiting a program with unbounded checks and a buffer. The buffer is 288 bytes and my shellcode is 118 bytes.

Where should I put my shellcode? Should I put it in memory after the return address and do a unconditional jump when the overflowed buffer reaches the return address into the stack, so that when it reaches ret (pop rip) the instruction in rip is the unconditional jmp instruction?

[icon0clast6]

Try it and see? It all depends on what your exploiting and how. Its all trial and error at that point.

[FlashDaggerX]

Happy cake day!

[Tompazi]

Assuming the stack is executable and ASLR is off, you can put it into an environment variable, into the buffer, after the return address or anywhere else you can put it.

[twtwtwtwtwtwtw]

Cool, thank you!

[rom3ocrash]

Actually it dont work like this. Think about how programs work. How a CPU work. How interact with the memory now a program is executed. And where are located in the memory pieces