I am working on an exploit for a ctf-challenge and could't find any hint about my problem. My steps so far:
- I could successfully overwrite EIP with an "jmp esp" address and jump to my shellcode.
- I have determined all "bad-chars" which will cut my shellcode. There are none ;)
The problem is, I have only 44 bytes of space for my shellcode and this is not enough for my shellcode. Since my egghunter can't find the rest of my shellcode, I assume it's not written in the memory. The OS is Windows 7 x86 without SP1.
Is there any way to expand the space for my shellcode or to exploit the application in another way? Thanks in advance.