Does anybody know how to inject in EBP and EIP addres properly ?
I treid many posiblities ,but it is stil 4bits earlier .

injecting.c

main(){
int i=0;
char stuffing[40];

for (i=0;i<=44;i+=4)
*(long *) &stuffing[i] = 0x080483f5;
puts(stuffing);
}


then

sh#: (./injecting;cat)|./recieving

core dumped

sh#:gdb recieving core dump

(gdb) info registers
eax 0x36 54
ecx 0x36 54
edx 0xb7f470f0 -1208717072
ebx 0xb7f45ff4 -1208721420
esp 0xbfe794b8 0xbfe794b8
ebp 0x83f50804 0x83f50804
esi 0x8048420 134513696
edi 0x8048320 134513440
eip 0x83f50804 0x83f50804
eflags 0x10246 [ PF ZF IF RF ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
(gdb) q

Code injection falls into a pretty shady category, with the potential to be in violation of LQ Rules. Hacking/cracking/exploiting are not welcome topics of discussion here.

It may make no difference what your response is, but for a few minutes, I'll give you the benefit of the doubt: what is the purpose/intent of what you are attempting to do here?

Sasha

EDIT: OK, time's up. This thread is scheduled for closure.