Dec. 16, 2023, 2:23 p.m. | Vasanth Vanan

System Weakness - Medium systemweakness.com

Injecting 0x113 — Format String Binary Exploitation

Recently, I had fun exploring format string binary exploitation. I want to share a step-by-step walkthrough on it and I hope everyone finds it interesting. This binary used specific flags during compilation and execution, as shown below.

Let’s start by disassembling the main function. It calls three user-defined functions: validate_params, bazinga, and that_fyi_was_sarcasm.

validate_params → This function validates the number of parameters passed to the program. 0x8048618 <+3> compares the …

binary binary exploitation ctf defined exploitation format string fun function hope main reverse engineering share start walkthrough

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Senior InfoSec Manager - Risk and Compliance

@ Federal Reserve System | Remote - Virginia

Security Analyst

@ Fortra | Mexico

Incident Responder

@ Babcock | Chester, GB, CH1 6ER

Vulnerability, Access & Inclusion Lead

@ Monzo | Cardiff, London or Remote (UK)

Information Security Analyst

@ Unissant | MD, USA