bof.txt

To find badchars

!mona config -set workingfolder c:\mona\%p
!mona bytearray -b "\x00"
!mona compare -f C:\mona\oscp\bytearray.bin -a <esp address>



To find JMP ESP

!mona jmp -r esp -cpb <badcharshere> to find jmp esp