Re: problem in rewrite RET address in Buffer OverFlow

You should find all imported DLLs by the vulnerable program and then do a search
for required opcode (in this case jmp esp) to find memory addresses that dose
not contain NULLs. In the case of no suitable address , then you should think
about using other possible methods like SEH exploitation or ret encoding.

Behrang Fouladi
Received on Oct 26 2005