Leaking the Stack / Printf Format Vulnerability | echooo [32] picoCTF 2018

[@Baoaa123]

This is such a good explanation of the printf vulnerability. Had lecturers and tutors warn us constantly but never demonstrated, what a powerful vulnerability!

[@yossig7316]

I'm going to go on a John Hammond 1 week saga and re-watch all the older videos :-) Thank you!

[@baciukrystyan6479]

Thank you for all the videos!!!

[@_JohnHammond]

Thank you for watching! :D

[@tobiasvelvang764]

Mate, you crushing it!

[@LordMcRob]

I like your videos very much. But the content density is very high. I did this challenge on my own and it took me quite some to notice the flag pointer. Without this pointer your solution would not work and just mentioned it very short. Just a small remark😉 thx for the write up!

[@_JohnHammond]

Thank you so much for the kind words, I really appreciate it! :D

[@vanievors2476]

%N$x is called direct parameter access, where N is the element on the stack you want to print

[@siddharthmittal9355]

really good work!

[@zedeleyici.1337]

seni izleyip başka challenge'ler yapmaya çalışıyorum. yapamayınca üzülüyorum. ama yapıcam. illa bir gün yapıcam

[@shivashiva8021]

Thanks a lot

[@x-defenderlabs6101]

you are the best bro , don't stop you will be the frist

[@mortyn]

Hi, how would i script it if i was to run it towards a local C-program? if you were to test it locally first.

[@_JohnHammond]

Rather than using the `remote()` function within Pwntools, you can use the `process` function in Pwntools. That can let you automate the interaction with the program the same way that you do with the remote service. Thanks for watching!

[@mortyn]

@@_JohnHammond Thank you :)

[@rafiabbel1795]

why do i get b'.../n' for the loop out of the pwntools?

[@seewhatseeabc]

Bro you coding is so fking clean

[@socomplicated808]

love your videos. although I have no idea what you are doing. I just started working for an IT company and just started using linux. Would it be possible for you to start a scripting tutorial? I always see you write short scripts in your videos but Im clueless

[@justice4g]

haven't watched them but the hak5 channel have been doing linux shell tutorials lately

[@arjunbemarkar7414]

what is that thumbnail supposed to be?

[@_JohnHammond]

The thumbnail is one of the PicoCTF 2018 robots, that are seen in the "game" version. It seems to be their mascot for this year! :P

[@codechapter6960]

Nice