This is our fourth and final part of our series focusing on the analysis of a PDF hack. In this entry we at last get around to present the shellcode’s flow graph.

You can see Part I, Part II and Part III for further context. 

Part 4: The Shellcode’s Flow Graph

Using the tool graphviz, we are able to create the flow graph for this shellcode:

Command 1:

sctest -Sgs 100000000 -v -G shellcode.dot < util_printf_sc.txt

Command 2:

dot shellcode.dot -Tpng -o shellcode.png

(To see the full graph, please click on the photo, we swear it's safe).