From ec1320e2d97e810bdab91e8c21b55ce505b82d88 Mon Sep 17 00:00:00 2001 From: lucky-vers Date: Fri, 10 Nov 2023 01:42:54 +0530 Subject: [PATCH] Fix sentence --- Phase 2/02 Binary Exploitation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Phase 2/02 Binary Exploitation.md b/Phase 2/02 Binary Exploitation.md index ebc8796..755b8b1 100644 --- a/Phase 2/02 Binary Exploitation.md +++ b/Phase 2/02 Binary Exploitation.md @@ -14,7 +14,7 @@ We're given a C source file `vuln.c` and told there's a vulnerability in it. Bro Here, the final `printf` statement is not a literal. My IDE even gives me a warning here. In this, if I use any format specifiers such as `%s`, `%ld` or `%p`, `printf` will treat them as such and then try to access additional information, potentially causing a memory overflow and/or security vulnerabilities. -We're also given a command `nc mercury.picoctf.net 6989` to run the program on the server. We use this method of injecting format specifiers, in it +We're also given a command `nc mercury.picoctf.net 6989` to run the program on the server. We use a few different format specifiers as shown below. 1. **Using the character sequence specifier `%s`** ```