Exploit Development: How to Write Specific Values to Memory with Format String Exploitation

During our last adventure into the realm of format string exploitation, we learned how we can manipulate format specifiers to rewrite a program's memory with an arbitrary value. While that's all well and good, arbitrary values are boring. We want to gain full control over the values we write, and today we are going to learn how to do just that. A Quick Refresher on Format Strings Before we continue, let's go back over what a format string is and how we can manipulate them. In the C programming language, a format string looks something like this: printf( "We have %d dogs", 2 ); And will... more

from WonderHowTo http://ift.tt/2DXOr8v
via IFTTT