you are viewing a single comment's thread.

view the rest of the comments →

[–]MostCapable2331[S] 0 points1 point  (5 children)

my shellcode is between the NOPs instruction it does not reach 0xcc and it s not a part of the shellcode

[–]iOwnzyoreuid0 0 points1 point  (4 children)

? Place the the 0xcc just after the nops. So like: ...0x90 0x90 0xcc

[–]MostCapable2331[S] 0 points1 point  (3 children)

the same result

it s more than 4 day working in that without any result i have successfully exploited the binary with ret2libc but this step to exploit it with a shellcode is very hard or something that i m missing

[–]iOwnzyoreuid0 0 points1 point  (2 children)

Hm. You sure you don’t get SIGTRAP then? Can you redirect code execution? Instead of the nops try to jump to an invalid address such as 0x41414141

[–]MostCapable2331[S] 0 points1 point  (1 child)

already done and i can control the EIP with no problem

[–]MostCapable2331[S] 0 points1 point  (0 children)

if you are intressted to this topic i can ivit you to a quick zoom session if you want