TechNote
Page tree

Versions Compared

Old Version 6

changes.mady.by.user Lazenca.0x0

Saved on

compared with

New Version Current

changes.mady.by.user Lazenca.0x0

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

List

Table of Contents
excludeList

Heap Exploit

Panel
titleDescription of Heap Exploitation.

Content Report Table
labelsheap-exploitation

Exploit table

Panel
titleExploit table
Exploits

Access areaOverwrite areaFreeFake chunk
StackHeapTop chunkF - sizeF - bkA - prev_sizeA - sizeDouble FreeFree(Stack area)Stack areaHeap area
First fit
O








Fastbin dup
O




O


Fastbindupinto stackO



O
O
O
(size)
Poison null byte
O

O
(1byte)







O
(prev_size)
Overlapping chunks
O
O






Overlapping chunks 2
O
O






House of einherjarO



OO

O
(Free chunk)


The House of ForceO
O







The House of LoreO


O



O
(Free chunk)
The House of SpiritO






OO
(size, size of top chunk)
Unsorted bin attackO


O





Unsafe unlinkO



OO


O
(Free chunk)
Panel
HTML
<div align="center">
<script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>
<!-- Contents -->
<ins class="adsbygoogle"
     style="display:inline-block;width:728px;height:90px"
     data-ad-client="ca-pub-1411820076951016"
     data-ad-slot="3793401480"></ins>
<script>
(adsbygoogle = window.adsbygoogle || []).push({});
</script>
</div>
Panel
HTML
<div align="center">
<script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>
<!-- the_right -->
<ins class="adsbygoogle"
     style="display:inline-block;width:300px;height:600px"
     data-ad-client="ca-pub-1411820076951016"
     data-ad-slot="8363201884"></ins>
<script>
(adsbygoogle = window.adsbygoogle || []).push({});
</script>
</div>