Re: problem in rewrite RET address in Buffer OverFlow

[behrang () hat-squad com]

You should find all imported DLLs by the vulnerable program and then do a search
for required opcode (in this case jmp esp) to find memory addresses that dose
not contain NULLs. In the case of no suitable address , then you should think
about using other possible methods like SEH exploitation or ret encoding.

Behrang Fouladi