Why do I see a filler being used in some exploits?
Take as an example the code below:
exploit = junk + eip + nops + shellcode fill = "\x43"*(BUF_SIZE-len(exploit)) buf = exploit + fill
I guess the buffer is the max number of byte we can send to the stack..our exploit could be smaller than that so we add a filter to make it more stable? Is it recommended? Can we just do without a filler?