CTF challenges & writeups

42 challenges tagged #tcache-poisoning ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
H34P_D3V1L #tcache-poisoning	LYKNCTF 2026	–	Pwn	files wu 1
SimpleNote #use-after-free (uaf)#tcache-poisoning #fastbin-fd-overwrite	BlitzCTF 2025	23.20	Pwn	files wu 1
baby_talk #heap #off-by-null #house-of-einherjar #tcache-poisoning #free-hook	DiceCTF 2024 Quals	54.40	Pwn	files wu 1
Welcome_to_the_Jungle #tcache-poisoning	SunshineCTF 2024	38.57	Pwn	files wu 2
strvec #integer-overflow #out-of-bounds-write #tcache-poisoning	ASIS 2021 Quals	89.22	Pwn	files wu 3
Plaidflix #use-after-free (uaf)#double-free #safe-linking #tcache-poisoning	PlaidCTF 2021	99.64	Pwn	files wu 1
Heap_Heap #unsorted-bin-leak #tcache-poisoning #malloc-hook #one-gadget	S4CTF 2021	24.52	Pwn	files wu 1
membership_management #use-after-free (uaf)#tcache-poisoning #overlapping-chunks	Securinets 2021 Quals	41.71	Pwn	files wu 1
Cache_7 #use-after-free (uaf)#tcache-poisoning	Shakti 2021	25.00	Pwn	files wu 2
University_Pwn #use-after-free (uaf)#tcache-poisoning	Tamil 2021	14.13	Pwn	files wu 1
Helpless #house-of-rust #tcache-poisoning	corCTF 2021	24.92	Pwn	files wu 1
NO-OUTPUT #ret2dlresolve #tcache-poisoning #blind-pwn	darkCON 2021	24.06	Pwn	files wu 1
safe_vector #out-of-bounds (oob)#negative-index #tcache-poisoning #cpp	zer0pts 2021	24.56	Pwn	files wu 1
refcnt #use-after-free (uaf)#tcache-poisoning #fsop	ASIS 2020 Finals	64.97	Misc	files wu 1
yet_another_house #poison-null-byte #tcache-stash-unlink #tcache-poisoning #seccomp-bypass	ASIS 2020 Finals	64.97	Misc	files wu 1
studysim #tcache-poisoning	HSCTF 2020	–	Misc	files wu 1
note #negative-index #tcache-poisoning #malloc-hook #one-gadget	RCTF 2020	–	Misc	files wu 2
karte #use-after-free (uaf)#tcache-poisoning	TSG 2020	–	Misc	files wu 3
Baby_Tcache #tcache-poisoning #free-hook-overwrite #libc-leak	BackdoorCTF 2019	56.00	Misc	files wu 1
popping_caps #tcache-poisoning #house-of-spirit #malloc-hook-overwrite #one-gadget	CSAW 2019 Quals	43.00	Misc	files wu 3
popping_caps2 #tcache-poisoning #tcache-perthread-corruption #free-hook-overwrite #one-gadget	CSAW 2019 Quals	43.00	Misc	files wu 3
babyheap #tcache-poisoning	FireShell 2019	24.49	Misc	files wu 1
Aria_Writer #tcache-poisoning	HSCTF 2019	–	Misc	files wu 1
Aria_Writer_v3 #tcache-poisoning	HSCTF 2019	–	Misc	files wu 1
iz_heap_lv1 #tcache-poisoning	ISITDTU 2019 Quals	23.38	Misc	files wu 3
ManyNotes #house-of-orange #thread-arena #tcache-poisoning #one-gadget	RCTF 2019	–	Misc	files wu 2
chat #double-free #tcache-poisoning #got-overwrite	RCTF 2019	–	Misc	files wu 2
zero_to_hero #poison-null-byte #tcache-poisoning #double-free	picoCTF 2019	–	Pwn	files wu 3
asvdb #uninitialized-variable #use-after-free (uaf)#double-free #tcache-poisoning #free-hook-one-gadget	ASIS 2018 Finals	55.00	Misc	files wu 3
slot_machine #tcache-poisoning	Hack.lu 2018	72.75	Misc	files wu 1
limit #off-by-one #tcache-poisoning #overlapping-chunks	smileyCTF 2025	48.61	Pwn	files wu 1
garbage-is-easy #tcache-poisoning	FE-CTF 2022	–	Pwn	files wu 1
Gradebook #tcache-poisoning	K3RN3LCTF 2021	24.37	Pwn	files wu 2
card #tcache-poisoning	GACTF 2020	–	Misc	files wu 1
toddler_cache #tcache-poisoning	HackPack 2020	–	Misc	files wu 1
EasyWrite #tcache-poisoning	N1CTF 2020	36.00	Misc	files wu 1
Cards #tcache-poisoning #safe-linking-bypass #environ-leak #orw-rop	PoseidonCTF 2020	–	Misc	files wu 2
plang #out-of-bounds-write #heap-overlap #tcache-poisoning #malloc-hook-overwrite	0CTF 2019 Quals	–	Pwn	files wu 1
Ramen #tcache-poisoning	Harekaze 2019	23.87	Misc	files wu 1
schmaltz #tcache-poisoning	InCTF 2019	37.00	Misc	files wu 1

Challenges