Format String vulnerabilities
Hi there!
This video introduces the core ideas behind format string vulnerabilities. We quickly review what is a format string, what is a variadic function, and how arguments are passed to variadic functions. Then we analyze what happens when you let the user decide what format string to use, and how this situation can lead to security issues.
If you're interested in the content of the video and in my work, you can subscribe to my patreon to access a private git server where I host all the notes and assets showcased in the video and much more.
Patreon: / hexdump
Git Server: https://git.hexdump.sh
Thank you very much for watching.
-------------------------
TIMESTAMP
00:00 What's a Format String?
03:03 What's a Variadic Function?
09:55 Is this dangerous?
14:50 Analysis with GDB
21:33 Example 1 - Read local variable
27:22 Example 2 - Write local variable
-------------------------
REFERENCES
printf: https://man7.org/linux/man-pages/man3...
-------------------------
CONTACTS
Patreon: / hexdump
Coffee: https://buymeacoffee.com/hexdump
Git: https://git.hexdump.sh
Blog: https://blog.leonardotamiano.xyz/
In questa pagina del sito puoi guardare il video online Format String vulnerabilities della durata di ore minuti seconda in buona qualità , che l'utente ha caricato hexdump 06 maggio 2025, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 1,805 volte e gli è piaciuto 90 spettatori. Buona visione!
