CTF challenges & writeups

223 challenges in family ⊕ pwn:heap ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
zigzag #zig-heap-exploitation #rop	corCTF 2022	24.92	Pwn	files wu 1
EzOrange #house-of-orange #heap-exploitation #oob-write	vsCTF 2022	23.32	Pwn	files wu 2
kvstore #heap-exploitation #oob-read #memcmp-leak	zer0pts 2022	35.97	Pwn	files wu 1
strvec #integer-overflow #out-of-bounds-write #tcache-poisoning	ASIS 2021 Quals	89.22	Pwn	files wu 3
babyjeep #double-free #fastbin-dup	BlueHens 2021	22.62	Pwn	files wu 1
word_games #heap #tcache-perthread-corruption #unsorted-bin-leak #libc-2.33	CSAW 2021 Quals	20.54	Pwn	files wu 2
Quotebook #heap #use-after-free (uaf)#function-pointer-overwrite	DaVinciCTF 2021	24.50	Pwn	files wu 2
SiceSiceBaby #heap #off-by-one-null #tcache #glibc	DiceCTF 2021	24.82	Pwn	files wu 1
flippidy #heap #double-free #tcache #glibc-2.27	DiceCTF 2021	24.82	Pwn	files wu 3
hashbrown #kernel #race-condition #use-after-free (uaf)#fg-kaslr-bypass	DiceCTF 2021	24.82	Pwn	files wu 1
Use_After_Freedom #use-after-free (uaf)	HSCTF 2021	–	Pwn	files wu 1
stonks-socket #kernel-uaf	Hack.lu 2021	94.48	Pwn	files wu 1
Gotta_Go_Fast #double-free	ImaginaryCTF 2021	–	Pwn	files wu 1
hookless #house-of-botcake	MetaCTF 2021	–	Pwn	files wu 1
Meddle #tcache-dup	NahamCon 2021	24.98	Pwn	files wu 2
Plaidflix #use-after-free (uaf)#double-free #safe-linking #tcache-poisoning	PlaidCTF 2021	99.64	Pwn	files wu 1
The_Cobol_Job #use-after-free (uaf)#libcob #free-hook #proc-self-maps	PlaidCTF 2021	99.64	Pwn	files wu 1
Pokemon #tcache-stashing-unlink #heap-overflow #null-byte-bypass	RCTF 2021	–	Pwn	files wu 1
catch_the_frog #integer-overflow #heap-overflow	RCTF 2021	–	Pwn	files wu 1
sharing #shared-ptr #refcount-underflow #use-after-free (uaf)	RCTF 2021	–	Pwn	files wu 1
unistruct #stdvariant #iterator-invalidation #use-after-free (uaf)	RCTF 2021	–	Pwn	files wu 1
Heap_Heap #unsorted-bin-leak #tcache-poisoning #malloc-hook #one-gadget	S4CTF 2021	24.52	Pwn	files wu 1
death_note #heap-overflow #fd-overwrite #libc-leak	Securinets 2021 Quals	41.71	Pwn	files wu 1
membership_management #use-after-free (uaf)#tcache-poisoning #overlapping-chunks	Securinets 2021 Quals	41.71	Pwn	files wu 1
Cache_7 #use-after-free (uaf)#tcache-poisoning	Shakti 2021	25.00	Pwn	files wu 2
University_Pwn #use-after-free (uaf)#tcache-poisoning	Tamil 2021	14.13	Pwn	files wu 1
cache_v2 #refcount-overflow #use-after-free (uaf)	TetCTF 2021	25.00	Misc	files wu 1
Jump_Is_Found #format-string #got-overwrite #heap	UMDCTF 2021	–	Pwn	files wu 1
Monke #use-after-free (uaf)#tcache	UTCTF 2021	–	Pwn	files wu 1
CShell #heap-overflow	corCTF 2021	24.92	Pwn	files wu 3
Helpless #house-of-rust #tcache-poisoning	corCTF 2021	24.92	Pwn	files wu 1
Rusty #house-of-rust #null-byte-poisoning	corCTF 2021	24.92	Pwn	files wu 1
fire_of_salvation #kernel-uaf #msg-msg #cred-overwrite	corCTF 2021	24.92	Pwn	files wu 1
NO-OUTPUT #ret2dlresolve #tcache-poisoning #blind-pwn	darkCON 2021	24.06	Pwn	files wu 1
Warmup #heap #tcache #libc-2.27	darkCON 2021	24.06	Pwn	files wu 1
CoffeeShop #use-after-free (uaf)	idekCTF 2021	24.56	Pwn	files wu 1
stacknotes #house-of-spirit	idekCTF 2021	24.56	Pwn	files wu 1
Donut_Factory #heap-fake-chunk	m0leCon 2021 Quals	24.55	Pwn	files wu 1
Little-Alchemy #heap-overflow	m0leCon 2021 Quals	24.55	Pwn	files wu 3
safe_vector #out-of-bounds (oob)#negative-index #tcache-poisoning #cpp	zer0pts 2021	24.56	Pwn	files wu 1

Challenges