Fuzzing Sudo (Part I): From NSS to Heap Overflow — Linking CVE-2025-4802 with Baron Samedit (CVE-2021-3156)

Posted on 20 days ago

A journey for bug hunting in Linux binary fuzzing

House of Muney

Posted on 2025-05-15

Steal memory from libc to hijack symbol resolution logic for RCE

Posted on 2025-05-04

Hijack from the inside—abuse internal GOT/PLT in modern glibc

Posted on 2025-04-21

Make “Format String Vulnerability” great again

Posted on 2025-04-14

Attack on Tcache Structures for Heap Exploitation in Modern Glibc

Posted on 2025-02-24

Side-Channel Attack: Exploit CVE-2023-6199 with Blind File Oracles

Posted on 2025-01-28

Exploit a classic Glibc buffer overflow on PHP heaps & APK Reversing

Posted on 2024-12-16

Exploit the vfork() function call debugging parent/child processes

Posted on 2024-12-04

This note covers advanced GDB debugging with demo code

Posted on 2024-11-17

An custom Linux OS for Pwners