MicroCorruption/12-Addis Ababa/notes.md

408 B

Taken verbatim from my notebook

Page 1

Addis Ababa
    format string vulns? (manual hint)
    %n: store # chars printed into stack vaf
        ? where ?
        -> 2 prev characters??
    30e0: flag location
        lE: e0 30

30e0: \0\0  n a  m e  : p  a s  s\0
 argv [ 1 ][ 2 ][ 3 ][ 4 ][ 5 ][ 6 ]

    addr  A   %n
    e0 30 %n  %n
    DEL 0 %n  %n

Editor's note:

    e030 256e 256e