um. hi. i am also rotshb. my rotshb brother whom i love can write exploits but he cant paste them worth a damn. line 155 should read: (void)memcpy((ptr+(dlen-4)),&i,sizeof(i)); thats in attack() when attacking a linux target just following the line: i = (optimized?t.opt_addr:t.addr)+offset; that line is rather important. bye