help@cyb4rgeek.xyz

+1 (512) 588 6950

The toddler’s introduction to Heap Exploitation, Unsafe Unlink(Part 4.3)

Home/The toddler’s introduction t...
The toddler’s introduction to Heap Exploitation, Unsafe Unlink(Part 4.3)
The toddler’s introduction to Heap Exploitation, Unsafe Unlink(Part 4.3) bez0x January 16, 2023
Consolidating in free
1st step: After Line 1350 is executed
2nd step: After Line 1351 is executed

Creating a fake chunk

chunk0_ptr[2] = 0x555555558018 — 3 * 8 = 0x555555558000
chunk0_ptr[2] = 0x555555558018 — 3 * 8 = 0x555555558008
FD = P->fd => FD = 0x0000555555558000
BK = P->bk => BK = 0x0000555555558008

Leave a Reply