Can you provide further explanation please, as no one was able to reproduce this exploit so far. Two mains questions: - how to catch & decrypt the hash. It is easy to use wireshark for all internet traffic but after finding the hashkey how to decrypt? - and my noob question: how to inject the hex-key. I can only edit starting at position X but i don't unterstand the BOF and MOV-statements. Maybe one can even upload the done exe&dll? Thanks.