title: How does %NNN$hhn work in a format string?
body: <p>I am trying out a classic format string vulnerability. I want to know how exactly the following format string works:</p>
  
  <blockquote>
    <p>"%NNN$hhn" where 'N' is any number.  </p>
    
    <p>E.g: printf("%144$hhn",....);</p>
  </blockquote>
  
  <p>How does it work and how do I use this to overwrite any address I want with arbitrary value?</p>
  
  <p>Thanks and Regards,<br>
  Hrishikesh Murali</p>