Format String Vulnerability Tutorial Part I - Windows

This video explains format string vulnerabilities on Windows systems. We first start with a small theory part, followed by a practical example. We show you step by step how attackers can exploit such vulnerabilities to execute arbitrary code.

Although Format string vulnerabilities are almost gone these days, they serve as excellent examples of so-called arbitrary four byte overwrites.  When we later start with Heap Overflows, the techniques and situatiosn seen and used here will be of great value.

Sharing and embed code