Here is the flow of a buffer overflow payload with a NOP Sled.

- Jump to overwritten return address that (hopefully) points to somewhere in the NOPs (0×90)
- Consume the No Operations (NOPs)
- Execute the shell code
Here is the flow of a buffer overflow payload with a NOP Sled.
