nightmare icon indicating copy to clipboard operation
nightmare copied to clipboard

Add Type Confusion and Heap Feng Shui

Open EuanB26 opened this issue 4 years ago • 0 comments

I recently watched a video explaining about some attacks for bin exp, and came across a heap attack called heap feng shui. The link to the video is here (heap feng shui explanation starts at 33:18 after type confusion explanation): https://www.youtube.com/watch?v=59HuF1hni8I&list=PLUU79oBORyMhfViAsbK5yGZS9K5HQu4M2&index=15

Unfortunately I'm not able to find many resources on learning this, apart from the blackhat talk "Heap feng shui in javascript" as a browser exploitation technique. However, liveOverflow has done a video on it, linked here: https://www.youtube.com/watch?v=zWgS6fTw4Ts

Also googling for "heap feng shui ctf" brings up some better results than just the blackhat talk.

As well as heap feng shui, it would be amazing if you could put on Type Confusions as well 👍🏼

In addition, I also learnt that printf is using malloc under the hood, which can be exploitable via __malloc_hook, which'll be a very interesting read.

This is an amazing resource which I've shared and encourage multiple friends to read up on, so carry on with the great work :smile:

EuanB26 avatar Sep 14 '20 20:09 EuanB26