~/CSC 472/Class 06

CSC 472 · Class 06

Format String Vulnerabilities

18 knowledge points. Work through them in order, or jump to any topic.

//

Knowledge Points

01Where This Class Fits → 02The Root Cause → 03How Common Was It? → 04Variadic Argument Sourcing (x86-64 System V ABI) → 05Argument Sourcing —- Diagram → 06Leaking the Stack with {%p → 07Positional Args and Finding Your Offset → 08What Is Worth Leaking → 09Arbitrary Read with {%s → 10The {%n → 11Controlling the Written Value → 12Worked Outline: Overwrite a GOT Entry → 13Return Address vs. GOT —- Which Target? → 14Why This Is Such a Strong Primitive → 15Defenses: Write Correct Code → 16Defenses: Hardening in Depth → 17Attack vs. Defense Summary → 18Tie-in to Lab 3 →