Words from the Past

The program reads exactly 5 bytes of shellcode into an RWX page and jumps to it — but the first byte is forced and the whole thing is heavily filtered: 0xE8/0xE9 + a 4-byte displacement is exactly 5 bytes, so each stage is a single relative call/jmp instruction — the whole primitive is “jump…