Heap Two Writeup - Exploit Education Lab Exercise

Sat, 06 May 2023 00:00:00 +0000

If you haven’t set up your lab yet, feel free to check out my previous article on Exploit.education lab setup

Previous Writeup:

Stack Zero Writeup - Exploit Education Lab Exercise
Stack One Writeup - Exploit Education Lab Exercise
Stack Two Writeup - Exploit Education Lab Exercise
Stack Three Writeup - Exploit Education Lab Exercise
Stack Four Writeup - Exploit Education Lab Exercise
Stack Five Writeup - Exploit Education Lab Exercise
Stack Six Writeup - Exploit Education Lab Exercise
Format Zero Writeup - Exploit Education Lab Exercise
Format One Writeup - Exploit Education Lab Exercise
Format Two Writeup - Exploit Education Lab Exercise
Format Three Writeup - Exploit Education Lab Exercise
Format Four Writeup - Exploit Education Lab Exercise
Heap Zero Writeup - Exploit Education Lab Exercise
Heap One Writeup - Exploit Education Lab Exercise

Quick Overview

Similar to Heap One, Heap Two exercise motive is to leverage buffer overflow and perform UAF (User-After-Free Vulnerability) that technically allows to re-use the allocated memory in the heap to control the program flow. Similar to gets in Heap Zero, strdup function is unsafe that doesn’t have bounds check, it accepts memory address to copy but doesn’t care about overwriting other declared struct variable in the heap region.

Use-After-Free on Shivasurya

Heap Two Writeup - Exploit Education Lab Exercise

Quick Overview