diff --git a/Phase 2/02 Binary Exploitation.md b/Phase 2/02 Binary Exploitation.md index ebc8796..755b8b1 100644 --- a/Phase 2/02 Binary Exploitation.md +++ b/Phase 2/02 Binary Exploitation.md @@ -14,7 +14,7 @@ We're given a C source file `vuln.c` and told there's a vulnerability in it. Bro Here, the final `printf` statement is not a literal. My IDE even gives me a warning here. In this, if I use any format specifiers such as `%s`, `%ld` or `%p`, `printf` will treat them as such and then try to access additional information, potentially causing a memory overflow and/or security vulnerabilities. -We're also given a command `nc mercury.picoctf.net 6989` to run the program on the server. We use this method of injecting format specifiers, in it +We're also given a command `nc mercury.picoctf.net 6989` to run the program on the server. We use a few different format specifiers as shown below. 1. **Using the character sequence specifier `%s`** ```