$ show ir0nstone/cybersec-notes
This repository is a comprehensive cybersecurity knowledge base focused on offensive security techniques, particularly binary exploitation, cryptography, reverse engineering, and CTF challenge writeups. It serves as an educational resource containing detailed tutorials, exploit development guides, and solution writeups for various platforms (HackTheBox, picoCTF, etc.). The content is organized by topic with markdown files explaining concepts ranging from basic stack overflows to advanced heap exploitation techniques like tcache poisoning and kernel attacks. While not containing runnable applications, it provides reusable exploit methodologies and code snippets that security practitioners can adapt for learning and CTF preparation.
The LLM identified 3 files worth highlighting for reuse:
Provides a clear, step-by-step tutorial on exploiting a simple ret2win vulnerability via buffer overflow. Includes payload construction, offset calculation, and ROP basics. The explanation is self-contained with reusable code snippets (Python/pwntools) that demonstrate core stack exploitation principles applicable to similar CTF challenges.
Details the classic unlink exploit technique for heap corruption, explaining heap metadata manipulation, fake chunk creation, and exploitation prerequisites. The guide includes diagrams and C code snippets that illustrate the mechanics, making it a reusable reference for understanding and adapting heap exploitation techniques in modern glibc environments with applicable bypasses.
Explains double free vulnerabilities and exploitation via tcache poisoning in modern glibc. Covers detection, heap grooming, and arbitrary write primitives with practical examples. The content is structured as a reusable reference for heap exploitation, featuring adaptable code patterns and mitigation bypass strategies relevant to current CTF challenges and real-world scenarios.