CTF challenges & writeups

223 challenges in family ⊕ pwn:heap ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Phantom_Device #use-after-free (uaf)#refcount-mismatch #tcache-grooming #role-forgery	BDSec 2026	15.62	Pwn	files wu 1
H34P_D3V1L #tcache-poisoning	LYKNCTF 2026	–	Pwn	files wu 1
down_the_line #bootsector-pwn #heap-overflow	TRX 2026	–	Pwn	files wu 1
house_of_fishing #largebin-attack #heap	TRX 2026	–	Pwn	files wu 2
slop_allocator #custom-allocator #heap	TRX 2026	–	Pwn	files wu 1
SimpleNote #use-after-free (uaf)#tcache-poisoning #fastbin-fd-overwrite	BlitzCTF 2025	23.20	Pwn	files wu 1
portable_graphics #go-binary-reversing #png-chunk-crafting #custom-chunk	CTF@AC 2025 Quals	24.53	Reverse	files wu 1
oboe #kernel #heap-overflow #off-by-one #use-after-free (uaf)#rop #commit-creds #kpti-bypass	DiceCTF 2025 Quals	81.00	Pwn	files wu 1
cheap_logs #use-after-free (uaf)	DownUnderCTF 2025	91.66	Crypto	files wu 1
messenger #page-level-uaf	LA 2025	–	Pwn	files wu 1
Learning_OOP #heap-overflow #vtable #safe-linking-bypass	SekaiCTF 2025	55.00	Pwn	files wu 1
Baby_Kernel #kernel-exploitation #use-after-free (uaf)#jop	UIUCTF 2025	–	Pwn	files wu 2
do_re_mi #mimalloc #heap-exploitation	UIUCTF 2025	–	Pwn	files wu 1
cratecrack #heap-uaf #ecdsa-nonce-bias	bi0sCTF 2025	95.79	Pwn	files wu 1
UAP #use-after-free (uaf)#function-pointer-hijack	1337UP 2024	–	Pwn	files wu 1
baby_talk #heap #off-by-null #house-of-einherjar #tcache-poisoning #free-hook	DiceCTF 2024 Quals	54.40	Pwn	files wu 1
Welcome_to_the_Jungle #tcache-poisoning	SunshineCTF 2024	38.57	Pwn	files wu 2
heap01 #heap-overflow #tcache-corruption	SunshineCTF 2024	38.57	Pwn	files wu 1
palindromatic #cross-cache-uaf #dirtypipe	bi0sCTF 2024	79.83	Pwn	files wu 1
corchat_v3 #sql-injection #use-after-free (uaf)#tcache-perthread-struct	corCTF 2024	55.00	Pwn	files wu 1
Maltigriti #use-after-free (uaf)#heap-overlap	1337UP 2023	24.23	Pwn	files wu 1
notebook #heap-overflow #pointer-chunk-overwrite #arbitrary-read-write #libc-2.35	CYBERGON 2023	–	Pwn	files wu 1
popcorn #heap #use-after-free (uaf)#function-pointer-overwrite #ret2win	DeadSec 2023	23.96	Pwn	files wu 1
chessrs #wasm #rust #use-after-free (uaf)#xss #web	DiceCTF 2023	36.70	Pwn	files wu 2
mailman #fastbin-dup	ImaginaryCTF 2023	34.52	Pwn	files wu 2
softshell #heap #linked-list #argument-count-mismatch #arbitrary-write	PatriotCTF 2023	24.52	Pwn	files src wu 1
blackout #integer-truncation #heap-overflow	SECCON 2023 Quals	100.00	Pwn	files wu 1
tinyfs #use-after-free (uaf)#arbitrary-write	TSG 2023	–	Pwn	files wu 3
kcipher #use-after-free (uaf)#kernel-uaf	corCTF 2023	36.97	Pwn	files wu 2
Obfuscated #java-reversing #string-obfuscation #per-chunk-check	DaVinciCTF 2022	24.50	Reverse	files wu 1
cache #heap #use-after-free (uaf)#tcache #heap-leak	Defcamp 2022	–	Pwn	files wu 3
baby-rop #heap #use-after-free (uaf)#glibc-2.34 #stack-pivot #seccomp #orw	DiceCTF 2022	24.82	Pwn	files wu 3
byor #house-of-apple	Hack.lu 2022	93.70	Pwn	files wu 1
Free_Real_Estate #use-after-free (uaf)	NahamCon 2022	24.61	Pwn	files wu 1
memory #heap-exploitation #seccomp #orw	Securinets 2022 Quals	50.11	Pwn	files wu 1
ctf_sim #use-after-free (uaf)	TAMUctf 2022	–	Pwn	files wu 1
TheShowMustGoOn #heap-overflow #function-pointer-overwrite #ret2win	UMDCTF 2022	–	Pwn	files wu 1
KrampusGifts #race-condition #tcache #heap-exploitation #multithreading	X-MAS 2022	–	Pwn	files wu 1
CoRJail #off-by-null #kernel-uaf #container-escape	corCTF 2022	24.92	Pwn	files wu 1
cshell2 #heap-exploitation	corCTF 2022	24.92	Pwn	files wu 2

Challenges