Redirecting to Format string attack