CrackCodes 🇮🇳

👌2

353 viewsalex 14324, 14:13

|The Apocalypse of the Heap - Shizo edit.|

💥Painless intro to the Linux userland heap
The heap is hard to maintain, especially in this implementation due to being threaded. Hopefully this article helps you understand the process of making a chunk free from its allocation and which structures play in the game of freeing chunks.

💥Understanding glibc malloc
💾How heap memory is obtained from kernel?
💾How efficiently memory is managed?
💾Is it managed by kernel or by library or by application itself?
💾Can heap memory be exploited?

💥ptmalloc fanzine episodes(collection of resources related to glibc heap meta-data corruptions):
💾episode 01: munmap madness
💾episode 02: fastbin fever
💾episode 03: scraps of notes on ptmalloc metadata corruptions
💾episode 04: once upon a realloc()
💾episode 05: thread local caching in glibc malloc

💥Heap exploitation for Dummies.
This short book is written for people who want to understand the internals of 'heap memory', particularly the implementation of glibc's 'malloc' and 'free' procedures, and also for security researchers who want to get started in the field of heap exploitation.
🔖github repo

💥Educational Heap Exploitation(how2heap) is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases.

💥GlibC Malloc for Exploiters presentation

💥Linux Heap Exploitation Intro Series:
💾printf might be leaking!
💾Used and Abused – Use After Free
💾The magicians cape – 1 Byte Overflow
💾Riding free on the heap – Double free attacks!
💾Set you free() – part 1
💾Set you free() – part 2

💥How to exploit a double free vulnerability in 2021(Exploiting an ARM-only race condition)
You will learn how to exploit a double free vulnerability or exploit a UAF vulnerability.

💥Linux kernel heap feng shui in 2022
In this article we discuss changes in the Linux kernel slab allocator implementation and exploitation challenges associated with kernel heap-related vulnerabilities. We focus on the SLUB (unqueued slab allocator) implementation in this article since it is the most common allocator enabled by default on most Linux distributions and Android devices.

💥Overview of GLIBC heap exploitation techniques
Overview of current GLIBC heap exploitation techniques up to GLIBC 2.34, including their ideas and introduced mitigations along the way.

💥Perfect Spray: A Journey From Finding a New Type of Logical Flaw at Linux Kernel To Developing a New Heap Exploitation Technique
In this talk, we will present Pspray, a new memory exploitation technique for the Linux kernel, dramatically improving the exploitation reliability. In particular, we designed a heap exploitation technique effective for most memory vulnerabilities, including heap OOB, UAF, and double-free. The key idea behind this new attack is in developing timing side-channels in Linux's SLUB allocator. Then using this timing side-channel, we carefully redesigned the traditional exploitation technique to precisely predict the runtime behavior of SLUB, allowing Pspray to avoid unexpected exploitation failure. We used Pspray's exploitation technique for 10 real-world Linux kernel vulnerabilities, which significantly improved the attack success probability from 56.1% to 97.92%.

332 viewsHayper (CyberSecdev), 14:28