Cybersecurity

Format String Exploitation

Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enabling arbitrary stack reads (%p/%s), arbitrary memory writes (%n/%hn/%hhn), GOT/hook overwrites, and canary/libc/PIE leaks.

Publisher / source

yaklang/hack-skills (found on skills.sh)

Upstream record

yaklang/hack-skills

Version

Version 4

Published

2026-11-10

Publication review

Approved for publication · recorded passed scan 2026-11-10

Content fingerprint

62893048bdbf7620ff89936f74dcb926db98d3637dfa7091c52af833dd301d3b