This is a brief whitepaper tutorial that discusses format string exploitation.
You can download it from the following link: https://packetstormsecurity.com/files/download/123363/formatstring-tutorial.pdf
Source: https://packetstormsecurity.com/files/123363/Format-String-Exploitation-Tutorial.html