FormatAEG: a framework for bypassing ASLR defense and automated exploitation of format string vulnerability.

The article presents FormatAEG, the first automated exploitation framework designed to bypass Address Space Layout Randomization (ASLR) defenses and automatically exploit format string vulnerabilities, particularly in 64-bit programs. FormatAEG introduces two key methods: an arbitrary address reading and writing technique that handles user-controllable inputs stored outside the stack and truncated by null bytes, and a vulnerability reentry method based on Global Offset Table (GOT) hijacking to enable repeated triggering of non-reentrant vulnerabilities. Evaluated on 22 Capture The Flag (CTF) and real-world programs with ASLR enabled, FormatAEG detected 19 format string vulnerabilities and generated exploits for 15, outperforming existing tools like Zeratool. The framework integrates symbolic execution and dynamic analysis to effectively address challenges in exploiting format string vulnerabilities under modern system protections.