Fuzzing Sudo (Part I): From NSS to Heap Overflow — Linking CVE-2025-4802 with Baron Samedit (CVE-2021-3156)

Posted on 11 hours ago

A journey for bug hunting in Linux binary fuzzing

House of Muney

Posted on 2025-05-15

Steal memory from libc to hijack symbol resolution logic for RCE

Posted on 2025-05-04

Hijack from the inside—abuse internal GOT/PLT in modern glibc

Posted on 2025-04-21

Make “Format String Vulnerability” great again

Posted on 2025-04-14

Attack on Tcache Structures for Heap Exploitation in Modern Glibc

Posted on 2025-01-28

Exploit a classic Glibc buffer overflow on PHP heaps & APK Reversing

Posted on 2024-10-12

Defeat the pointer guard and hijack execution flow.

Posted on 2024-09-24

High level GLIBC I/O operation exploit: Largebin Attack + FSOP

Posted on 2024-09-18

ORW ROP chain with magic gadgets to pwn a Sandbox

Posted on 2024-08-31

LargeBin Attack is the future for heap exploitation.