$ ctf42

#heap CTF challenges

26 CTF challenges using heap from 20 CTFs (2018–2026), 26 with writeups. Mostly Pwn (62%) and Misc (38%).

Pwn · 16 Misc · 10

Often combined with

#use-after-free 7 #tcache 7 #got-overwrite 3 #malloc-hook-overwrite 2 #function-pointer-overwrite 2 #unsorted-bin-leak 2 #off-by-one-null 2 #libc-2.27 2 #seccomp-orw-shellcode 1 #userfaultfd 1 #linux-kernel-exploitation 1 #mmap-threshold-overwrite 1 #fsop 1 #tcache-dup 1 #libc-2.32 1

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Category Has
SPlaid_Birch
#oob-index#splay-tree#heap
 PlaidCTF 2019 95.72 Misc files wu 3
error_program
#heap#use-after-free (uaf)#tcache#libc-2.27
 Defenit 2020 23.88 Misc files wu 3
cache
#heap#use-after-free (uaf)#tcache#heap-leak
 Defcamp 2022 – Pwn files wu 3
baby-rop
#heap#use-after-free (uaf)#glibc-2.34#stack-pivot#seccomp#orw
 DiceCTF 2022 24.82 Pwn files wu 3
Online_Nonogram
#heap#tcache#uninitialized
 TokyoWesterns 2020 – Misc files wu 3
SecureKarte
#heap#tcache
 TokyoWesterns 2019 – Misc files wu 3
flippidy
#heap#double-free#tcache#glibc-2.27
 DiceCTF 2021 24.82 Pwn files wu 3
faker
#use-after-free (uaf)#heap#seccomp-orw-shellcode
 3kCTF 2020 24.14 Misc files wu 2
Lil_Chompy
#use-after-free (uaf)#heap#arbitrary-read
 SunshineCTF 2020 23.34 Misc files wu 2
Rnote4
#no-relro#got-overwrite#heap
 RCTF 2018 – Misc files wu 2
house_of_fishing
#largebin-attack#heap
 TRX 2026 – Pwn files wu 2
Quotebook
#heap#use-after-free (uaf)#function-pointer-overwrite
 DaVinciCTF 2021 24.50 Pwn files wu 2
word_games
#heap#tcache-perthread-corruption#unsorted-bin-leak#libc-2.33
 CSAW 2021 Quals 20.54 Pwn files wu 2
how-to-heap
#heap#tcache-dup#malloc-hook-overwrite#safe-linking#libc-2.32
 CyberSecurityRumble 2020 28.00 Misc files wu 2
TiKToK
#heap#off-by-one-null#chunk-overlap#unsorted-bin-leak
 DawgCTF 2020 23.29 Misc files wu 2
nullptr
#heap#mmap-threshold-overwrite#fsop#malloc-hook-overwrite
 ALLES 2020 – Misc files wu 2
klibrary
#linux-kernel-exploitation#userfaultfd#heap
 3kCTF 2021 24.14 Pwn files wu 1
HeapStormII
#house-of-storm#unsorted-bin-attack#large-bin-attack#heap
 0CTF 2018 Quals – Pwn files wu 1
popcorn
#heap#use-after-free (uaf)#function-pointer-overwrite#ret2win
 DeadSec 2023 23.96 Pwn files wu 1
Warmup
#heap#tcache#libc-2.27
 darkCON 2021 24.06 Pwn files wu 1
SiceSiceBaby
#heap#off-by-one-null#tcache#glibc
 DiceCTF 2021 24.82 Pwn files wu 1
baby_talk
#heap#off-by-null#house-of-einherjar#tcache-poisoning#free-hook
 DiceCTF 2024 Quals 54.40 Pwn files wu 1
Just_another_heap
#heap#null-pointer-write#write-what-where#got-overwrite
 DCTF 2021 – Pwn files wu 1
softshell
#heap#linked-list#argument-count-mismatch#arbitrary-write
 PatriotCTF 2023 24.52 Pwn files src wu 1
Jump_Is_Found
#format-string#got-overwrite#heap
 UMDCTF 2021 – Pwn files wu 1
slop_allocator
#custom-allocator#heap
 TRX 2026 – Pwn files wu 1