when i download a copy of vulnerable program and try to exploit it by buffer overflow (any internal function calling as a payload) it works. but when i made a same type of vulnerable program in c i am not able to exploit it and i have no idea whats going wrong. checking on gdb i figure out that i am able to over write the return address on the stack but still getting a segmentation fault and my desired address is not executed
the vulnerable program:
#include<stdio.h>
input()
{
char a[4];
gets(a);
puts(a);
}
main()
{
input();
printf("\nthis will execute after returning from the function\n");
}
over()
{
printf("this can only be executed by the hacker");
}
i want to execute the function "over" and i used the payload
printf "aaaaaaaa\xb3\x84\x04\x08" | ./my
thankyou
