Where This Class Fits
- Class 04—05: stack overflows, shellcode, ASLR / PIE bypass.
- Today: a different, often subtler bug class —- format strings.
- A format string bug hands the attacker both an arbitrary read and an arbitrary write primitive from a single mistake.
- It pairs naturally with ASLR bypass (Class 05): leak first, then write.
Key Takeaway
One missing "%s" can be as dangerous as a buffer overflow —- sometimes more, because it can both read and write memory.