Format String Vulnerability


Some simple tips/pointers on the interesting topic of format string vulnerabilities.


Most commonly associated with c/c++ and printf family of function calls.

Yes, you can read values of the stack using %p modifier and write to memory locations using %n.


Get some practice exploiting format string vulnerabilities over at


Very straight forward examples –

Thank you

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s