Overview of Exploit Payload Crafting
See the original post on my WordPress site
According to Wikipedia:
‘shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called “shellcode” because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode.’
Perhaps the most straightforward example of this would be a buffer overflow exploit, the shellcode being what’s carried into the next buffer for execution.