domains / families / security / heap-exploitation

heap-exploitation

separate

Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

When to use

• ptmalloc2/glibc heap vulnerabilities
• UAF
• double free
• overflow
• off-by-one/null
• tcache/fastbin/unsortedbin attacks
• arbitrary write
• code execution

When not to use

• stack overflow
• format string exploitation
• binary protection bypass

Skill page

Source