Win32 Egg Hunting. Part 8 in a series of tutorials.
You can download it from the following link: https://packetstormsecurity.com/files/download/87023/exploit-writing-tutorial-part-8-win32-egg-hunt.pdf
Source: https://packetstormsecurity.com/files/87023/Win32-Egg-Hunting.html