skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ctf-pwn-heap

Execute heap exploitation workflows against authorized CTF binaries.

Updated Jul 30, 2026
Search Tags:#security#exploitation#heap#ctf#pwn#glibc
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-pwn-heap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-pwn-heap
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/ctf-pwn-heap
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-pwn-heap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, authorized workflow for identifying and exploiting heap-based memory corruption vulnerabilities in CTF and educational binary targets.

Core Features & Use Cases

  • Allocator Analysis: Fingerprints glibc versions and heap allocator configurations to determine viable exploitation paths.
  • Exploit Primitives: Implements complex techniques including tcache poisoning, fastbin dup, House of Botcake, and FSOP for control-flow hijacking.
  • Use Case: Use this skill to analyze a challenge binary, leak libc addresses via unsorted bin, and perform a tcache poisoning attack to overwrite a function hook and gain shell access in a controlled lab environment.

Quick Start

Use the ctf-pwn-heap skill to analyze the heap layout and identify potential exploitation primitives for the provided binary challenge.

Frequently Asked Questions about ctf-pwn-heap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit heap vulnerabilities like tcache poisoning in glibc binaries?▼

Heap exploitation workflows analyze glibc allocator configurations to execute tcache poisoning and fastbin manipulation attacks, achieving arbitrary read/write or control-flow hijacking against authorized CTF binaries.

What techniques are needed for glibc heap exploitation in CTF challenges?▼

Glibc heap exploitation requires targeting allocator vulnerabilities through techniques like tcache poisoning, fastbin dup, House of Botcake, and FSOP to manipulate heap metadata and hijack control flow.

Can I use heap exploitation techniques on any binary environment?▼

Heap exploitation targets authorized CTF and educational binaries specifically, requiring binary and libc metadata alongside strict scope validation and safety gates for all tool interactions during testing.

How do I leak libc addresses during heap exploitation?▼

Heap exploitation workflows leak libc addresses by manipulating unsorted bin pointers, allowing subsequent tcache poisoning attacks to overwrite function hooks and gain shell access in controlled lab environments.

What is FSOP in glibc heap exploitation?▼

FSOP (File Stream Oriented Programming) is a heap exploitation technique that corrupts glibc file stream structures, enabling control-flow hijacking through fake file objects to achieve arbitrary code execution.

Related Skills

Explore More Software Engineering Skills→
lNwNllNwNl
2

heap-exploitation

Convert glibc heap vulnerabilities into exploitation primitives across allocator versions.

Community
Advanced
DexterJieDexterJie

solve-challenge

Automate CTF challenge resolution by triaging categories and executing operations.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-ctf-binary

Analyze binary files to identify memory corruption vulnerabilities and develop exploits.

Official
Advanced
258369123258369123
2

ctf-pwn

Identify and exploit memory corruption vulnerabilities in CTF binaries.

Community
Advanced