I was reading this article by Hackers Grimoire on Windows buffer overflow attacks.
The article made sense, except for the part where the author searched for a DLL (.dll) file which contained a
JMP ESP instruction. I understood the other requirements, such as ensuring the DLL was not protected with DEP, ASLR etc...
Why was it necessary to find a DLL file with
JMP ESP and note its memory address?