Buffer Overflow

[DeepBlueMagic]

I know how to USE buffer overflows but how can I make the shellcode (the "\x..\x..\x..." thing)? It seems that the shellcode in linux can be maked by gdb when you disassemble a run-the-/bin/sh-program but my output isn't the same and don't work! And is this possible in windows??

[huntx7]

Hmm...I know a tutorial on this...Lemme find it. I'll post it up here.

[xmaddness]

Here is a good tut on Exploits and buffer overflows by our own zxtech found in our tutorials database. You can find it Here.

Enjoy.

[huntx7]

Here are some buffer overflow tutorials(some have shell code in it):
http://www.hack3r.com/index.cfm?sec=texts&page=32
Some results from my google search:
http://julianor.tripod.com/bufo.html
http://www.securiteam.com/securityre...OP0B006UQ.html
http://www.cse.cuhk.edu.hk/~csc5470/...note/tuto1.ppt

Here is the search results link:
http://www.google.com/search?hl=en&l...=Google+Search

I believe if you want to write to bin/sh try this:
char shellcode[]=
"/bin/sh";

[DeepBlueMagic]

Thx!