Determine the shellcode needed to implement a return to system call attack that calls system(whoami; cat /etc/shadow; exit;), targeting the same vulnerable program in the code below. You need to identify the location of the standard library system() function on the target system by tracing a suitable test program with a debugger. You then need to determine the correct sequence of address and data values to use in the attack string. Experiment with running this attack.

int main() { int a[10]; clrscr(); for(int i = 0; i<=20; i++) a[i] = i*5; // STACK OVERFLOW HERE return 0; }