[SIM-1866423]

Hi guys ı have one question, about BOF's. I saw many times this weird codes in BOF exploits.There example ;

PHP Code


<?php 
s.send("USV " + buffer + "\r\n\r\n") 
s.send("MKD" + buffer + "\r\n\r\n") 


USV and MKD <-- When ı was search in google, ı found this answer --> "bad-characters".But ı must learn the logic.Why we are using this words in BOF exploits.Can anyone explain to me logic ?


❓

[Ichi]

Often times you want to find and eliminate bad characters in custom exploits because they can break the shellcode..

In your particular case, it appears as though those two lines are meant for fuzzing the vulnerable application. Those lines are not the actual exploit