OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Taking the control by abusing array index.

dulliengmx.de
Date: Mon Feb 21 2005 - 16:15:00 CST

> pointer_array[unsigned_int] = malloc(....);

Try setting the unsigned int so that you overwrite a function ptr. It is
kinda
important what ppl do with the malloced space afterwards, you basically
want malloc() to return memory into which you've previously written
shellcode.

Cheers,
Thomas Dullien