[3SidedSquare]

That depends on the vuln function. Some vuln functions don't use null bytes to mark the end of execution.

Let my try.

The attack vector is a way to get some code running on another computer

The payload is the actual code that runs.

If the process is going though the instructions, and hits a null byte, it stops.

I think you may have had the two mixed up