pwnPromedium
Chunks (Чанки)
duckerz
Task: Menu-based heap allocator with create/delete/view commands, no edit function. Solution: House of Botcake technique exploiting double-free vulnerability and uninitialized heap data leak to overwrite __free_hook with system() in glibc 2.33.
$ ls tags/ techniques/
heapsafe-linkingpwndouble-freehouse-of-botcaketcache-poisoningglibc-2.33__free_hookunsorted-bin-leakuse-after-free
tcache_poisoningsafe_linking_bypasshouse_of_botcakedouble_freeunsorted_bin_leakheap_info_leak__free_hook_overwrite
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]Дом с привидениями (Haunted House)— hackerlab
- [pwn][Pro]pwn9_mc5 — Mic Check: leak and pwn 2!— spbctf
- [pwn][Pro]pwn9_mc4 — Mic Check: leak and pwn!— spbctf
- [pwn][Pro]pwn10_nosoeasy — No-So-Easy: tcache poison → GOT overwrite— spbctf
- [pwn][Pro]ponbaby— volgactf2026