pwncollege
DojosLeaderboardCommunity
Back to intro-re-pwn~5933fc84

Format Strings

intro-re-pwn~5933fc84
0/2 challenges completed

Learn why untrusted text must not be used as a printf format string, then use the bug to inspect program memory.

Start with the "Start here" resource below. It explains what printf does with its format string, where printf finds its values, and how to read them back out. Suggested order: fmt-leak, then fmt-read.

Start here: what this module is about
Format markers, from zero
Where printf finds its values (x86-64)
Worked example: a toy program you can try yourself
How to read the output, and what to look for
Glossary and common mistakes

Challenges

1
Leak Values from Memory
2
Read a Chosen Address