> For the complete documentation index, see [llms.txt](https://www.ctfrecipes.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.ctfrecipes.com/pwn/stack-exploitation/format-string/dangerous-functions.md).

# Dangerous functions

Format string exploits occur when a program writes user-supplied input to a formatted string, and the user is able to include formatting commands that are interpreted by the program. The following are some well-known C functions that are vulnerable to format string exploits: