Tags: format-string fmtstr pwn 

Rating:

Use `%*c` and other arithmetic tricks to create an leakless format string that is consistent more than 1/3 of the time.

Original writeup (https://eth007.me/blog/ctf/stiller-printf/).