Any idea how can I solve it? I've found a stack overflow, overwrite the EIP and jumped to the ESP containing my injected info, but there are only 20 bytes for it...any idea how can I inject a shellcode?

shared memory.

... or, anonymous pipes.

An article here. By what a few considered to be by the "RED" one, albeit with a different nick....

-------[ Phrack Magazine --- Vol. 9 | Issue 55 --- 09.09.99 --- 15 of 19 ]


Have Phun

tnx guys!

I found that some of the data could be in EDX, how can i jump to EDX address? lets say the address or EDX is 0x0065ed12 from a nopsled?
like how can I write in opcode JMP EDX?

You mean, you want to write a shell code without knowing how to convert instructions into binary? Does not seem like you have found a stack overflow -- more like you are following a tutorial....

You need to get proficient with patching first. Then you could think of moving up the chain....

Obviously, I presume you also did not really bother to read the link I gave you... otherwise you would not have been asking this.


Have Phun

Really? That's a new twist. Not sure I see a stylistic match or anything...

"Au Contraire" my dear JMI.

The emotion matches even if the styles do not (though, I think it does to some extent)...

Note the:

1. Quotes (as usual)
2. Free world, etc. etc (as ususal)
3. Smooth flow of tutorial (as usual)

Though I admit, I am also a bit skeptical about the same... and yet, so many stalkers (older ones) have been "discussing" that possibility... of course, a big difference being "discussing" and actually "knowing"...

Guess we'll never know. Hence the term in my sentence "a few consider..." rather than simply say "By so-and-so"

Ah... the gone by days... *sigh*

Have Phun

Nope, I don't see a stylistic match there either

OK, I'll give you the RED one..

..Kayaker..

Apparently Aimless "assumed" I had written the post using the "nome de plume" of Kayaker!

In which case he's "Aim" would have been "less" than accurate!

Regards,

Nope guys...

Just showing off my French... (after translating it from Google translate... heh!) and...

OH! *NOW* I see.... it should have been K, not J.... my bad.

Have Phun

Interesting to see there is still an interest in the "RED" one. Luv it.