pwn.college
DojosLeaderboardCommunity
LoginRegister
Back to program-security

Dynamic Allocator Misuse

program-security
0/40 challenges completed

The glibc heap consists of many components distinct parts that balance performance and security. In this introduction to the heap, the thread caching layer, tcache will be targeted for exploitation. tcache is a fast thread-specific caching layer that is often the first point of interaction for programs working with dynamic memory allocations.

Dynamic Allocator Misuse: What is the Heap?
Video
Slides
Dynamic Allocator Misuse: Dangers
Video
Slides
Dynamic Allocator Misuse: tcache
Video
Slides
Dynamic Allocator Misuse: Chunks and Metadata
Video
Slides
Dynamic Allocator Misuse: Metadata Corruption
Video
Slides
Dynamic Allocator Misuse: Safe-Linking
Video
Slides

Challenges

1
level1.0
2
level1.1
3
level2.0
4
level2.1
5
level3.0
6
level3.1
7
level4.0
8
level4.1
9
level5.0
10
level5.1
11
level6.0
12
level6.1
13
level7.0
14
level7.1
15
level8.0
16
level8.1
17
level9.0
18
level9.1
19
level10.0
20
level10.1
21
level11.0
22
level11.1
23
level12.0
24
level12.1
25
level13.0
26
level13.1
27
level14.0
28
level14.1
29
level15.0
30
level15.1
31
level16.0
32
level16.1
33
level17.0
34
level17.1
35
level18.0
36
level18.1
37
level19.0
38
level19.1
39
level20.0
40
level20.1