`Taken verbatim from my notebook` # Page 1 ``` Addis Ababa format string vulns? (manual hint) %n: store # chars printed into stack vaf ? where ? -> 2 prev characters?? 30e0: flag location lE: e0 30 30e0: \0\0 n a m e : p a s s\0 argv [ 1 ][ 2 ][ 3 ][ 4 ][ 5 ][ 6 ] addr A %n e0 30 %n %n DEL 0 %n %n ``` Editor's note: ``` e030 256e 256e ```