format string exploitation
Results 1 to 5 of 5

Thread: format string exploitation

  1. #1
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,534

    format string exploitation

    While surfing over to check out my friends @ www.netric.org I found a nice tutorial by The Itch on format string exploitation.

    functions vulnerable to wrong formatting are:

    fprintf();
    printf();
    sprintf();
    snprintf();
    vfprintf();
    vprintf();
    vsprintf();
    vsnprintf();
    setproctitle();
    syslog();
    and many others like err*, verr*, warn* and vwarn*.
    Read it all here
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.

    Get your ass over to SLAYRadio the best station for C64 Remixes !

  2. #2
    Banned
    Join Date
    Dec 2002
    Posts
    394
    Man U got love coding! great info.

  3. #3
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    Hey the_JinX, thanks! I had only heard of format string exploits but hadn't found any detailed info on it!

    Ammo
    Credit travels up, blame travels down -- The Boss

  4. #4
    Kwiep
    Join Date
    Aug 2001
    Posts
    924
    There are may more and many other programming languages wich have the same problem. If you think abit about it there are more commands that are exploitable then there are who aren't (on the more davanced programming languages).
    Double Dutch

  5. #5
    Junior Member
    Join Date
    Jan 2003
    Posts
    1
    ddd

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •