skills.rest
utsavthakur
utsavthakurCOMMUNITY
Explore all skills by this author →
GitHub

heap-exploitation

Guide glibc heap exploitation techniques including tcache, fastbin, and unsortedbin attacks.

Updated Jun 11, 2026
Search Tags:#uaf#glibc#ptmalloc2#heap exploitation#double free
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill heap-exploitation-utsavthakur
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: heap-exploitation
Source: https://github.com/utsavthakur/agenticskills/tree/main/heap-exploitation
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill heap-exploitation-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pwndbg, how2heap, heapinspect, pwntools, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert-level guidance on glibc heap exploitation techniques, including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

Core Features & Use Cases

  • Heap Exploitation Techniques: Offers a comprehensive guide to various heap exploitation methods.
  • glibc Version Analysis: Provides attack selection based on glibc version constraints.
  • Bin Structures and Mechanics: Explains ptmalloc2 internals, bin structures, and tcache mechanics.
  • Leak Methods: Details libc/heap leak methods for different scenarios.
  • Use Case: Ideal for security researchers, penetration testers, and individuals working on exploiting heap vulnerabilities in software.

Quick Start

Load the heap-exploitation skill to access expert-level heap exploitation techniques and glibc version analysis.

Frequently Asked Questions about heap-exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit a glibc heap vulnerability like UAF or double free?▼

To exploit glibc heap vulnerabilities like UAF or double free, you leverage tcache, fastbin, or unsortedbin attacks to achieve arbitrary write or code execution. This requires understanding ptmalloc2 internals and specific bin mechanics.

How does ptmalloc2 tcache mechanics affect heap exploitation?▼

ptmalloc2 tcache mechanics significantly affect heap exploitation by changing how freed chunks are cached and reused. Understanding tcache structures is crucial for selecting appropriate attacks like tcache poisoning to gain arbitrary write.

How do I perform a libc leak during heap exploitation?▼

Performing a libc leak during heap exploitation involves manipulating bin structures to leak pointers. You can leave chunks in unsortedbin or specific structures to expose libc addresses and bypass ASLR for code execution.

Does glibc version impact the selection of heap exploitation techniques?▼

Yes, glibc version constraints directly impact heap exploitation technique selection. Different glibc versions introduce tcache protections, changing which fastbin or unsortedbin attacks remain viable for arbitrary write.

Can I use pwndbg and pwntools for glibc heap analysis?▼

Yes, you can use pwndbg for heap inspection and pwntools for scripting interactions. These tools work together to analyze ptmalloc2 bin structures, verify leaks, and execute heap exploitation attacks.

Related Skills

Explore More Software Engineering Skills→
yhy0yhy0
518

rce

Automate detection and exploitation workflows for remote code execution vulnerabilities.

Community
Advanced
salmanabdurrahmansalmanabdurrahman

ctf-pwn-heap

Execute heap exploitation workflows against authorized CTF binaries.

Community
Advanced
alirezarezvanialirezarezvani
24.2k

senior-secops

Automate security scanning, vulnerability assessment, and compliance checks with Python scripts.

Community
Intermediate
cyberkaidacyberkaida
797

ctf-pwn

Identify memory corruption vulnerabilities in CTF binaries and outline exploitation plans.

Community
Advanced