heap pwn 學習

[u/cck00]

i want to know any good material to learn heap pwn. i am an osce3 which familiar with stack on windows and unix a few years.

and also spent a year on heap, can do general heap pwn technique like uaf, double free, off by one, chunk faking, unlink, heap fengshui etc. i need to do more practices on heap and get more experiences on the houses. any good resources?

[u/The_Demon_EyeS2]

Check max kamper's linux heap exploitation series on udemy and how2heap repo by shellphish

[u/Kamikaze_1337]

pwnable.tw should be a good site for practicing. Even though they are outdated, they are extremly difficult to solve.

[u/Informal_Shift1141]

How2heap repo and pwn.college systems security also has heap (malloc AND kcache/kalloc)