EIP-2026-116896

This exploit demonstrates a stack-based buffer overflow in Blat v2.7.6, leveraging a malicious command-line argument to overwrite EIP and execute arbitrary shellcode (calc.exe). The PoC uses a JMP ESP instruction from kernel32.dll to redirect execution to the payload.