help@cyb4rgeek.xyz

+1 (512) 588 6950

The toddler’s introduction to Heap Exploitation, FastBin Dup to Stack (Part 4.1)

Home/The toddler’s introduction t...
The toddler’s introduction to Heap Exploitation, FastBin Dup to Stack (Part 4.1)
The toddler’s introduction to Heap Exploitation, FastBin Dup to Stack (Part 4.1) bez0x January 16, 2023

FastBin Double Free to Stack

https://github.com/shellphish/how2heap/blob/master/glibc_2.23/fastbin_dup_into_stack.c
In the fastbins list the first and last chunk point to the same address.
figure 1: next two callocs
figure 2: chunk address returned to $rax
figure 3: chunk address returned to $rax

Leave a Reply