Skip to content

Latest commit

 

History

History
14 lines (10 loc) · 481 Bytes

Day066_String_Format_Vulns.md

File metadata and controls

14 lines (10 loc) · 481 Bytes

TOPIC

STRING FORMAT VULNERABILITIES

EXPLANATION

Here, the formatting of string in code is weak, therefore this could lead to stack memory or buffer memory be exposed to the user.

This vulnerability is similar to the SQL injection vuln. Adding %p into the input, makes the "%p" a string format specifier, and it dumps the memory to it.

More to this can be leared in the link provided in the below REFERENCES section.

REFERENCES

https://www.youtube.com/watch?v=NnNYgFYcfSE