All right.
So for our final line, we're going to write our payload.
So in the Python three script, we're going to write with open payload as write binary.
Payload.
Right.
So we're going to write a file called Payload and then we're going to copy and paste this into our PO
box.
So go back to the bottom.
Nano.
Nano exploit.
Dot pie.
And then we're going to do Python three exploit.
Hi.
You should find a new file called Payload.
So what we're going to do, since we showed you how it works before it accepts input using get se.
We're going to run it and then we're going to ingest the payload, see what happened.
So Control be easy to zoom in and notice that we overrode the base pointer with eight B's and we also
overrode the return instruction pointer with six C's.
Now why do we choose six C's instead of eight C's?
Because on 64 bit computing, we actually utilize only up to 48 bits out of the 64 bit.
That's six bytes.
So what we can do now is map the exact location of when RDP is overwritten, which is right here.
So we go back and now we can work on our exploitation script.