[Semi OT] Auto return address / padding discovery - is it possible?

[Konrads Smelkovs <konrads () smelkovs com>]

Once in a while I stumble across a vulnerable system for which I don't have
ret address. The official solution is then to obtain the same version of OS
and software, load debugger and discover the new address. I wonder how
difficult would it be to use some brute-forcing and try to discover the
return address. Taking a step further, if during testing of a, say,
appliance one would discover a likely stack/heap overflow, to try to guess
the padding?

--
Konrads Smelkovs
Applied IT sorcery.

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework