Log in

View Full Version : Format string, how to exploit if after finding

galda
February 3rd, 2010, 22:27
I have found a format string here
http://pastebin.com/m27de4931
while using:
AAAAAAAAAAAA%x%x%x%x%x%x%x%x
but for some reason the normal ways of exploiting it didn't work...does anyone knows how to hack it to get a shell?
ronnie291983
February 4th, 2010, 00:21
more information please like the output u got when u gave the string
Ricardo Narvaja
February 4th, 2010, 03:39
the normal explotation is using %n (disabled by default in certain SO), in windows 2000 and XP works.

ricnar
disavowed
February 7th, 2010, 11:45
Quote:
=Ricardo Narvaja;85125]the normal explotation is using %n (disabled by default in certain SO), in windows 2000 and XP works.

This would actually be compiler/library-specific, not OS-specific.