This repository is a collection of proof-of-concept (PoC) exploit codes demonstrating various heap exploitation techniques in the GNU C Library (glibc) across versions 2.23 to 2.43. Each PoC is a standalone C program designed to be compiled and executed to showcase a specific heap corruption technique (e.g., fastbin dup, tcache poisoning, house of spirit, etc.) under controlled conditions. The primary purpose is educational, targeting security researchers, CTF participants, and students studying binary exploitation. The architecture is organized around a build system (Makefile) that compiles version-specific exploits located in directories named after glibc versions. Each exploit is self-contained with a main function, simulating heap manipulations to achieve arbitrary memory writes or code execution. Key entry points include the Makefile for building, an interactive heap exploration tool (malloc_playground.c), and a CI workflow for automated testing across multiple environments. The repository relies on glibc, build tools, and Docker for environment setup, with a submodule providing access to multiple glibc releases. The repository exhibits strong engineering practices through its reusable components: the Makefile employs wildcard and foreach functions to manage version-specific builds without duplication; malloc_playground.c offers an interactive interface for heap analysis that can be reused in other educational contexts; and the CI workflow uses a matrix strategy to test exploits across glibc and Ubuntu versions. Actively maintained with recent commits and low technical drift, the project adapts to glibc's evolving security mitigations by updating techniques for new versions, ensuring continued relevance in heap exploitation education.
ROPgadget is a Python CLI security tool that statically scans executable binaries for ROP, JOP, and SYS gadgets. It discovers architecture-specific byte patterns (x86/x64, ARM/ARM64, MIPS, PowerPC, SPARC, RISC-V), disassembles candidate regions with Capstone, and outputs address/instruction listings. It supports ELF, PE, Mach-O, raw, and universal/fat binaries, and offers filtering by mnemonic, regex, bad bytes, address ranges, and call-preceded gadgets. For x86/x64 ELF targets it can also generate a Python exploit script that chains gadgets into a ROP payload.
This repository is a comprehensive cybersecurity knowledge base focused on offensive security techniques, particularly binary exploitation, cryptography, reverse engineering, and CTF challenge writeups. It serves as an educational resource containing detailed tutorials, exploit development guides, and solution writeups for various platforms (HackTheBox, picoCTF, etc.). The content is organized by topic with markdown files explaining concepts ranging from basic stack overflows to advanced heap exploitation techniques like tcache poisoning and kernel attacks. While not containing runnable applications, it provides reusable exploit methodologies and code snippets that security practitioners can adapt for learning and CTF preparation.