Days now, we are going to find that jump instructions using this morning.
So let me explain in the script.
So first we have this, uh, E.S.P exactly what we want with these characters.
And let's see.
So instead of C, I can put an address that will in IP, I will put the address that will jump to E.S.P,
because E.S.P contains more than 900 words like 980 bytes of space.
We can fill up in this E.S.P.
So this is a very good place to host our circle.
So I will put the address in that introduction point such that whenever, uh, it has been, uh.
Yeah, a do gooder like I read it, read from the program is going to read this address and it will
jump to E.S.P know E.S.P.
Contents are controversial and we will get the.
So to find this dump instructions, we will use moaner in this video.
So what do you want to do?
Is you want to say Monami?
So this year that you are the models that are being used by the application, you can see in detail
and all the can that you do with your day, etc., and it also specifies the space address, address
and the signs.
And these are the security mechanisms that has been, uh, implemented.
So this is the reverse.
The starting base will be changed on the computer restart and also services, which is used to avoid
this as it exploits and is leader and then next combat and always be alert.
So you need to select the module from which these are first.
So because these are good mitigations, will invite over Chalco so you can see Iesus contents every
security mechanism of.
So now we can find in this module about the jump ESPN Judson's because E.S.P contains so much code,
we can be we can host Ultracal.
If Eastlakes contains so much space, we can directly jump to you.
So to find jump instructions you can say jump minus are so why not jump minus.
Are you two are with the space register and minus some uh in the space with uh module name.
So now what we're going to do is we are going to asking why to jump, to find the jump to reach years
in the Middle East as one great deal.
If you see you log and you can see these are the addresses I can use in our expert to jump to E.S.P.
So we got a bunch of others.
We can use any of these nine pointers.
And you can see these are the backcourts free and you can also mentioned the backorders here.
But we can just see that there is no null pointer in here.
Let me copy this copy address.
And let's put it in here.
So this is the jump.
So this is how you find the jump instructions using this.
You can also if you jump to your speed to such an armadas.
Oh, so you log to see the likes of this one can see we have got the 40 points, only 20 pandas are
shown here.
So we need to open this door to get to our point.
So these are the addresses from our other dealers.
But we do not need that because the security mechanisms for other dealers are true.
And for users, they are us.
They are not there.
So that's why we have found only the users.
So that's how you found you find the dump instructions or any other instructions.
We'll also see how to find it using the don't worry about that.
So to find the jumpseat, you need to use the one that is the one where to find the dump instructions.