Exploit Development: How to Read & Write to a Program’s Memory Using a Format String Vulnerability

Format strings are a handy way for programmers to whip up a string from several variables. They are designed to save the programmer time and allow their code to look much cleaner. Unbeknownst to some programmers, format strings can also be used by an attacker to compromise their entire program. In this guide, we are going to look at just how we can use a format string to exploit a running program. What Is a Format String? As mentioned above, a format string is a neat method by which a programmer can structure a string that they either plan to print or store to a variable. In the C... more