App - System

Hi guys any hint for me for this challenge ?

I’m able to write in the EBP and partly in the ESP but have no control over the EIP.

i think the trick is to write in the memory of the check variable, wich is not initialized and write 0xbffffabc in it. The problem is that im actually not able to overwrite the memory section of check.

cheers

Read the code carefully and try to think "the other way around" ;)