Editing Shellcode (section)

=== Egg-hunt ===
This is another form of ''staged'' shellcode, which is used if an attacker can inject a larger shellcode into the process but cannot determine where in the process it will end up. Small ''egg-hunt'' shellcode is injected into the process at a predictable location and executed. This code then searches the process's address space for the larger shellcode (the ''egg'') and executes it.<ref>{{cite web |url=http://www.hick.org/code/skape/papers/egghunt-shellcode.pdf 
|title=Safely Searching Process Virtual Address Space 
|author=Skape |publisher=nologin |date=2004-03-09 |access-date=2009-03-19}}</ref>