heap-exploitation

Guide glibc heap exploitation techniques including tcache, fastbin, and unsortedbin attacks.

Updated Jun 11, 2026

Search Tags:#uaf #glibc #ptmalloc2 #heap exploitation #double free

Ready to run

npx skills add https://github.com/utsavthakur/agenticskills --skill heap-exploitation-utsavthakur

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: heap-exploitation
Source: https://github.com/utsavthakur/agenticskills/tree/main/heap-exploitation
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill heap-exploitation-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pwndbg, how2heap, heapinspect, pwntools, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert-level guidance on glibc heap exploitation techniques, including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

Core Features & Use Cases

Heap Exploitation Techniques: Offers a comprehensive guide to various heap exploitation methods.
glibc Version Analysis: Provides attack selection based on glibc version constraints.
Bin Structures and Mechanics: Explains ptmalloc2 internals, bin structures, and tcache mechanics.
Leak Methods: Details libc/heap leak methods for different scenarios.
Use Case: Ideal for security researchers, penetration testers, and individuals working on exploiting heap vulnerabilities in software.

Quick Start

Load the heap-exploitation skill to access expert-level heap exploitation techniques and glibc version analysis.

Frequently Asked Questions about heap-exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I exploit a glibc heap vulnerability like UAF or double free?▼

To exploit glibc heap vulnerabilities like UAF or double free, you leverage tcache, fastbin, or unsortedbin attacks to achieve arbitrary write or code execution. This requires understanding ptmalloc2 internals and specific bin mechanics.

How does ptmalloc2 tcache mechanics affect heap exploitation?▼

ptmalloc2 tcache mechanics significantly affect heap exploitation by changing how freed chunks are cached and reused. Understanding tcache structures is crucial for selecting appropriate attacks like tcache poisoning to gain arbitrary write.

How do I perform a libc leak during heap exploitation?▼

Performing a libc leak during heap exploitation involves manipulating bin structures to leak pointers. You can leave chunks in unsortedbin or specific structures to expose libc addresses and bypass ASLR for code execution.

Does glibc version impact the selection of heap exploitation techniques?▼

Yes, glibc version constraints directly impact heap exploitation technique selection. Different glibc versions introduce tcache protections, changing which fastbin or unsortedbin attacks remain viable for arbitrary write.

Can I use pwndbg and pwntools for glibc heap analysis?▼

Yes, you can use pwndbg for heap inspection and pwntools for scripting interactions. These tools work together to analyze ptmalloc2 bin structures, verify leaks, and execute heap exploitation attacks.