File tree 1 file changed +12
-20
lines changed
1 file changed +12
-20
lines changed Original file line number Diff line number Diff line change @@ -104,42 +104,34 @@ gdb -q -ex "start" ./malloc_playground
104
104
105
105
There are some heap exploitation tools floating around.
106
106
107
- ## shadow
108
-
109
- jemalloc exploitation framework: https://github.com/CENSUS/shadow
110
-
111
- ## libheap
107
+ ## Malloc Playground
112
108
113
- Examine the glibc heap in gdb: https://github.com/cloudburst/libheap
109
+ The ` malloc_playground.c ` file given is the source for a program that prompts the user for commands to allocate and free memory interactively.
114
110
115
- ## heap-viewer
111
+ ## Pwngdb
116
112
117
- Examine the glibc heap in IDA Pro : https://github.com/danigargu/heap-viewer
113
+ Examine the glibc heap in gdb : https://github.com/scwuaptx/Pwngdb
118
114
119
- ## heapinspect
115
+ ## pwndbg
120
116
121
- A Python based heap playground with good visualization for educational purposes : https://github.com/matrix1001/heapinspect
117
+ An exploitation-centric gdb plugin that provides the ability to view/tamper with the glibc heap : https://github.com/pwndbg/pwndbg
122
118
123
- ## Forkever
119
+ ## gef
124
120
125
- Debugger that lets you set "checkpoints" as well as view and edit the heap using a hexeditor : https://github.com/haxkor/forkever
121
+ Another excellent gdb plugin that provides the ability to examine the glibc heap : https://github.com/hugsy/gef
126
122
127
- ## Malloc Playground
123
+ ## heap-viewer
128
124
129
- The ` malloc_playground.c ` file given is the source for a program that prompts the user for commands to allocate and free memory interactively.
125
+ Examine the glibc heap in IDA Pro: https://github.com/danigargu/heap-viewer
130
126
131
- ## Pwngdb
127
+ ## Forkever
132
128
133
- Examine the glibc heap in gdb : https://github.com/scwuaptx/Pwngdb
129
+ Debugger that lets you set "checkpoints" as well as view and edit the heap using a hexeditor : https://github.com/haxkor/forkever
134
130
135
131
## heaptrace
136
132
137
133
Helps you visualize heap operations by replacing addresses with symbols: https://github.com/Arinerron/heaptrace
138
134
139
- ## Heap Search
140
-
141
- Search for applicable heap exploitation techniques based on primitive requirements: https://kissprogramming.com/heap/heap-search
142
-
143
135
# Other resources
144
136
145
137
Some good heap exploitation resources, roughly in order of their publication, are:
You can’t perform that action at this time.
0 commit comments