crafting input string to exploit buffer overflow