House of Banana

Posted on 2024-10-21

Hijack execution flow by abusing _rtld_global in ld.so

House of Emma

Posted on 2024-10-12

Defeat the pointer guard and hijack execution flow.

Posted on 2024-10-10

A systme error message leading to shell

Posted on 2024-06-07

Fake a 0x10001 chunk on the Tcache metadata.

Posted on 2024-05-06

Make Tcache Double Free great again!