I'm writing a fictional short story in which I would like to be factually accurate. The protagonist is trying to overflow a buffer.

Suppose he is allowed to input a null-terminated string in a really low-security app. What would the payload of the string he uses look like? Would it just be a hex address? Would it differ for different computers? If possible, could you please give an example payload that would potentially work for a modern (post 2004) Windows or Mac laptop?

  • 3
    google "shellcode". And yes, it would be different between computer architectures (e.g. x86 for server/desktop/laptop and arm for phones).
    – Z.T.
    Oct 16, 2016 at 2:48
  • The metasploit project or ExploitDB.com have numerous examples that you can use for your purpose.
    – schroeder
    Oct 16, 2016 at 7:25
  • Search buffer overflow attacks in youtube and there will be loads of videos.
    – hax
    Oct 16, 2016 at 13:20

1 Answer 1


For being targeted;

PS. There is hundreds of exploits for post 2004, I just shared most known and nearest date.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .