PDA

View Full Version : advanced question

bsdjunkie
March 26th, 2003, 22:57
given part of the following shellcode:

\x40\xcd\x80\xe8\x62\xff\xff\xff

Why is xff needed multiple times? :wink:
elmore
March 26th, 2003, 23:03
I assume this is some kind of syscall.
Strog
March 31st, 2003, 13:03
I found this with google. "\xff\xff\xff\xff"; /* callsys ( disguised ) */

I see that it is part of most shellcode buffer overflow but I haven't found why yet. I'll keep digging.