📦
This card is Archived
Old, inactive cards are automatically Archived when reaching a certain age or engagement.
Go Premium
to re-enable your cards
Format String Exploit
{1}Weakness: Input Validation
"The root cause: trusting user-supplied input without validation. Can be used to read from the stack and write to arbitrary memory locations [Howard]"
user_input = "AAAA%p %p %p %p %p %p"
printf(user_input);
fprintf(STDOUT, user_input);


Card Comments 0
No comments yet. Be the first to comment!