+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: About buffer overflows .. (/showthread.php?tid=4530979)
About buffer overflows .. - SIM-1866423 - Nov 10, 2014
Hi guys ı have one question, about BOF's. I saw many times this weird codes in BOF exploits.There example ;
PHP Code
<?php
s.send("USV " + buffer + "\r\n\r\n")
s.send("MKD" + buffer + "\r\n\r\n")
USV and MKD <-- When ı was search in google, ı found this answer --> "bad-characters".But ı must learn the logic.Why we are using this words in BOF exploits.Can anyone explain to me logic ?
❓
* - Ichi - Nov 10, 2014
Often times you want to find and eliminate bad characters in custom exploits because they can break the shellcode..
In your particular case, it appears as though those two lines are meant for fuzzing the vulnerable application. Those lines are not the actual exploit