Heap Exploitation Resources

Exploitation Techniques

• Malloc Des-Maleficarum
• Pseudomonarchia jemallocum
• Vudo Malloc Tricks
• Shellphish How2Heap Repository
• Arm Heap Exploitation
• Heap-Exploitation
• House of Gods
• Once upon a free()
• Common Software Vulnerabilities, Part II: Explaining the Use After Free
• Understanding the heap by breaking it
• Exploiting the Wilderness
• Heap Exploitation - Fastbin Attack
• Weaknesses in Kernel Heap Hardening
• [CVE-2022-1786] A Journey To The Dawn
• Glibc Heap Exploitation Basics : Introduction to ptmalloc2 internals
• TCACHE Exploitation
• Digging into malloc
• Exploiting a textbook use-after-free in Chrome
• Some notes on attacking musl-libc's new heap allocator
• Exim Heap-based Buffer Overflow Notes
• Windows Segment Heap: Attacking the VS Allocator

Heap Internals

• Heap Flow Diagram
• Malloc Internals
• Malloc Internals and You
• Malloc Tutorial
• Heaps of Fun with glibc malloc
• Memory Management Reference
• Memory Allocators 101 - Write a simple memory allocator
• Understanding glibc malloc
• Memory Allocation II
• Memory Allocation

Academic Research

• Greybox Automatic Exploit Generation for Heap Overflows in Language Interpreters
• Automatic Heap Layout Manipulation for Exploitation
• Automation in Exploit Generation with Exploit Templates
• Glibc Adventures: The Forgotten Chunks