I guess this is fine if he is new to this. But playing around with buffer overflows and injecting a payload ( with a healthy dose of NOPs ) and having that open

I guess this is fine if he is new to this. But playing around with buffer overflows and injecting a payload ( with a healthy dose of NOPs ) and having that open a app ( maybe even a shell ) would be far better.