← Back to context

Comment by mschuster91

5 hours ago

> As a bonus, they also posted a reverse chain: popping Edge from calc [0].

What the hell is going on there? Apparently they are spawning new and new and new instances of calc.exe until one random (?) instance is vulnerable to some sort of attack, then they inject some shellcode into it from outside, and manage to trigger it by inputting "1"s until there's an overflow?

Really looking forward to the writeup lol