Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty
samcurry.net | blog | #bug-bounty | #fuzzing | #web-security | #null-byte | #buffer-overflow | #memory-disclosure
Summary
A curious fuzzing find turned into a $40,000 bounty: trailing null bytes and other removable characters in a registration form triggered memory disclosure—a rare null-byte buffer overflow case.
- Published
- Collected
--- id: 6572 title: "Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty" source_domain: samcurry.net source_url: "https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty" published_at: "2019-11-01T00:00:00Z" tags: ["bug-bounty", "fuzzing", "web-security", "null-byte", "buffer-overflow", "memory-disclosure"] phying_url: "https://phying.com/item/6572" lang: en --- # Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty ## Summary A curious fuzzing find turned into a $40,000 bounty: trailing null bytes and other removable characters in a registration form triggered memory disclosure—a rare null-byte buffer overflow case. ## Intelligence Metadata - **Sources:** samcurry.net - **Published:** 2019-11-01T00:00:00Z - **Original:** https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty - **Phying News:** https://phying.com/item/6572