shellcode development is something that I would like to know. I know the principles (overwrite a return address, jump into attacker controlled data, fork a shell), but it's that. I have no idea on how to do any of those
I am more a blue-teamer, so I start from the premise that the attack already succeeded and have to mitigate the damage. I love to see people exploiting things, writing exploits... but it's obscure for me how they find those things