3 replies to this topic

[e4tmonkieshyt]

Help!!! got a format string attack project


I got a project from school that is due next week.

Format String Attack: alter the flow of an application by using sting formatting library features to access other memory space. Vulnerabilities occur when user-supplied data are used directly as formatting sting input for certain C/C++ functions.

the thing is that our professor never taught any one of us hot to make a sample application of this. can someone help instruct me on how to do this or help make a sample application.

i don't even know what program to code this in.

thanks

[WingedPanther]

scanf takes pointers to addresses as parameters. My guess is he wants you to pass a pointer to a function as the char* input. The whole thing sounds rather goofy, though.

[e4tmonkieshyt]

yeah. the thing is i have not learned any sort of C programming at all yet. so i have no clue how to write the program, and the professor doesn't want to give any sort of help.

[WingedPanther]

What type of class is this? What prerequisites does it have?