format-string

A structured binary exploitation curriculum covering stack, heap, mitigations, ROP, and automated exploitation.

camelCase, kebab-case, PascalCase... a simple integration with nano package size. (SMALL footprint!)

My course work about basic binary exploitation.🤿

Pwn binary analysis tool — verified exploit techniques, auto-recovered gadgets, and AI helpers.

Miscellaneous utilities

Formatting and printing string utilities

PWN101. Step-by-step tutorials on some binary exploitation stack-based techniques.

picoCTF 2024 pwn write-ups - format-string primitives and heap exploitation

Форматирование строк (String formatting)

Vulnerabilities 1001: C-Family Software Implementation Vulnerabilities – OpenSecurityTraining2 is an advanced course on C/C++ software security, covering common implementation vulnerabilities, exploitation techniques, and mitigations while demonstrating expertise in secure coding, memory management, and real-world exploit analysis.

CTF PWN 知识库 / CTF PWN Knowledge Base — ret2text · ret2shellcode · ret2libc · ROP · fmtstr · heap · ORW · kernel pwn · C 库函数手册（中文撰写，双语导读）

The third in a series of four machines, each pen-tested and explained.

Hands-on exploration of buffer overflow and format string exploitation on 32-bit Linux, including ASLR, Stack Guard, and NX bit bypass techniques.

Implementations and proofs-of-concepts of binary exploitation attacks

A lightweight, zero-heap formatted output library in C recreating the standard printf function with support for %c, %s, %p, %d, %i, %u, %x, %X, and %%.

Cybersecurity fundamentals course logs and ctfs

🖨️ Printf C function

The fourth in a series of four machines, each pen-tested and explained.

HackCenter binary-exploitation ladder for Intro to Computer Security (UoA DI). 1230 points across 20+ challenges — stack overflows, format strings, ROP, shellcode, JVM reverse engineering. English write-up per challenge.

A custom reimplementation of the C printf() function, built from scratch using variadic arguments. Handles every required conversion (%c %s %p %d %i %u %x %X %%) plus optional formatting flags for width, precision, and padding — with zero memory leaks