Re: Fake frame overwriting

[joe <moj0e () terra com br>]

Thank you very much! : ) That is exactly what it was! I used a core dump 
to get my values and it worked like a charm! : )
Thanx!

########################
# W4rCr0-21 - LEVEL XV #
########################
- Yeah, right!!!

sh-2.05b# id
uid=0(root) gid=0(root) groups=501(j0e),80(cdwriter)
sh-2.05b# exit
exit
[j0e@localhostpital wargame]$



Philippe Biondi wrote:

> Hi,
>
> Your shellcode address is not the same whether you are running inside or
> outside gdb, because the size of the environment is different.
>
>
>