https://github.com/stephenbradshaw/vulnserver/blob/master/readme.md
someone recently shared this with me, so I wanted to pass it along.
some links from the author:
http://www.thegreycorner.com/2010/01/beginning-stack-based-buffer-overflow.html
http://www.thegreycorner.com/2010/01/seh-stack-based-windows-buffer-overflow.html
http://www.thegreycorner.com/2010/01/windows-buffer-overflow-tutorial.html
http://www.thegreycorner.com/2010/01/heap-spray-exploit-tutorial-internet.html
http://www.thegreycorner.com/2010/02/windows-buffer-overflow-tutorial.html
http://www.thegreycorner.com/2010/03/difference-between-heap-overflow-and.html
and on and on......
I found at least 20 posts that it is worth spending some time with, so hats off to the author.