title: injecting shellcode
body: <p>i have a .cmd file on a webserver with a variable user="...", vulnerable against buffer overflows. I can execute the .cmd file via ssh or via web. 
  Now i have this shellcode:</p>
  
  <pre><code>#include &lt;stdio.h&gt;
  
  char sc[] =
           "
            ...
               ";
  
  void main(void)
  {
  
         void(*s)(void);
         printf("size: %d\n", sizeof(sc));
         s = sc;
         s();
  }
  </code></pre>
  
  <p>my problem is, i don't know how this all plays together. I know what the Assembler and the C code does, but how do i inject the code into the running cmd file?</p>