[LOB]level14 giant

ID:giant  

PW:one step closer

hmm.. use ret sled.

ret sled: return ret ret ret.... eip point next 4byte

stack

buf | sfp | ret | ret's ret | ret's ret's ret| ret's ret's ret's ret|

shellcode put on argv[1]

Oh.. No addr.

add stack addr(possible). after ret, instruction point NOP(sleeeeeeed)

expoit

maybe easy . this way will be use FC3