format-string-exploitation
OfficialMaster format string exploits for remote access
Authoryaklang
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Format string vulnerabilities allow attackers to read memory, leak addresses, and potentially execute code; this Skill provides a playbook to identify, exploit, and safely reproduce these issues in controlled environments.
Core Features & Use Cases
- Address leakage via %p, %s, and positional specifiers to determine PIE/libc/base addresses.
- Arbitrary writes using %n/%hn/%hhn to modify memory and redirect control flow.
- GOT/relocation table manipulation to pivot to code execution in practice, including 32-bit and 64-bit scenarios.
- Guidance on bypassing mitigation like Fortify, RELRO, and ASLR in lab settings.
- Real-world use cases: CTF challenges, secure assessment training, and vulnerability research.
Quick Start
Analyze a vulnerable program and generate a working fmtstr payload to leak a libc address.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: format-string-exploitation Download link: https://github.com/yaklang/hack-skills/archive/main.zip#format-string-exploitation Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.