Exploiting Glibc Heap Vulnerabilities
Methodology for exploiting glibc ptmalloc2 heap vulnerabilities during authorized...
Install
npx skills add xalgorix/xalgorix --skill exploiting-glibc-heap-vulnerabilities -g -a claude-code -y- Repository
- xalgorix/xalgorix1.3k
- Category
- Security
- Updated
- 5d ago
- License
- Apache-2.0
- Context cost
- Mediumabout 2,298 tokens
- Runs scripts
- No, instructions only
What it does
Methodology for exploiting glibc ptmalloc2 heap vulnerabilities during authorized engagements, use-after-free, double-free, heap overflow, and bin-based attacks (tcache poisoning, fast-bin dup, unsorted/large-bin), including modern mitigations (tcache key, safe-linking, hook removal) and how to obtain leaks and arbitrary read/write.
Exploiting glibc Heap Vulnerabilities
When to Use
- During authorized exploitation of programs that dynamically manage memory with
malloc/calloc/freeand contain use-after-free, double-free, heap overflow, or off-by-one (poison-null-byte) bugs. - When the stack is not the corruption surface but you control freed-chunk contents, chunk size fields, or allocation ordering, and want to convert that into an arbitrary read/write or code-pointer overwrite.
- When selecting a bin-specific primitive: tcache poisoning, fast-bin dup, unsorted-bin attack, large-bin attack, House of Force/Einherjar/Botcake, etc.
- When you must account for the target glibc version's mitigations (tcache
key, safe-linking, removed malloc hooks).
