---
id: 6572
title: "Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty"
source_domain: samcurry.net
source_url: "https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty"
published_at: "2019-11-01T00:00:00Z"
tags: ["bug-bounty", "fuzzing", "web-security", "null-byte", "buffer-overflow", "memory-disclosure"]
phying_url: "https://phying.com/item/6572"
lang: en
---

# Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty

## Summary

A curious fuzzing find turned into a $40,000 bounty: trailing null bytes and other removable characters in a registration form triggered memory disclosure—a rare null-byte buffer overflow case.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2019-11-01T00:00:00Z
- **Original:** https://samcurry.net/filling-in-the-blanks-exploiting-null-byte-buffer-overflow-for-a-40000-bounty
- **Phying News:** https://phying.com/item/6572