Using relative JMP instructions to escape small buffers.
Format String Exploitation
A quick tutorial on exploiting format string vulnerabilities to read and write memory.
Credential Interception Using Malicious SMB Shares
How to intercept NTLM-SSP hashed credentials for offline cracking.