#use-after-free (uaf) CTF challenges
Also written as uaf.
58 CTF challenges using use-after-free (uaf) from 43 CTFs (2017–2026), 58 with writeups. Mostly Pwn (53%) and Misc (45%).
Often combined with
#tcache-poisoning 8 #heap 7 #tcache 5 #kernel 3 #heap-overlap 2 #function-pointer-overwrite 2 #race-condition 2 #double-free 2 #arbitrary-read 2 #kernel-exploitation 2 #function-pointer-hijack 1 #seccomp-orw-shellcode 1 #refcount-mismatch 1 #role-forgery 1 #tcache-grooming 1
Challenges
Filter and sort these in the challenge browser →
| Challenge | CTF | Weight | Category | Has |
|---|---|---|---|---|
| Shop | SPbCTF 2021 Quals | – | Misc | files wu 1 |
| Use_After_Freedom | HSCTF 2021 | – | Pwn | files wu 1 |
| Heap-Hop | Dragon 2020 | 98.00 | Pwn | files wu 1 |
| TemporaryFileSystemStorage | FireShell 2020 | 24.49 | Misc | files wu 1 |
| atoms | HITCON 2020 | – | Misc | files wu 1 |
| fakev | m0leCon 2020 Quals | 24.55 | Misc | files wu 1 |
| treecache_alyx | HSCTF 2020 | – | Misc | files wu 1 |
| zombie | DownUnderCTF 2020 | 24.44 | Misc | files wu 1 |
| CookShow | KipodAfterFree 2019 | 24.61 | Misc | files wu 1 |
| unistruct | RCTF 2021 | – | Pwn | files wu 1 |
| corchat_v3 | corCTF 2024 | 55.00 | Pwn | files wu 1 |
| sharing | RCTF 2021 | – | Pwn | files wu 1 |
| cache_v2 | TetCTF 2021 | 25.00 | Misc | files wu 1 |
| kSMS_Secure_Message_Storage | TeamItaly 2023 | 24.88 | Pwn | files wu 1 |
| Race | De1CTF 2019 | 24.28 | Misc | files wu 1 |
| hashbrown | DiceCTF 2021 | 24.82 | Pwn | files wu 1 |
| oboe | DiceCTF 2025 Quals | 81.00 | Pwn | files wu 1 |
| popcorn | DeadSec 2023 | 23.96 | Pwn | files wu 1 |