March 26th, 2003, 22:57
given part of the following shellcode:


Why is xff needed multiple times? :wink:

March 26th, 2003, 23:03
I assume this is some kind of syscall.

March 31st, 2003, 13:03
I found this with google. "\xff\xff\xff\xff"; /* callsys ( disguised ) */

I see that it is part of most shellcode buffer overflow but I haven't found why yet. I'll keep digging.