https://github.com/DhavalKapil/heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
https://github.com/DhavalKapil/heap-exploitation

book heap security

Last synced: about 2 months ago
JSON representation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

• Host: GitHub
• URL: https://github.com/DhavalKapil/heap-exploitation
• Owner: DhavalKapil
• Created: 2017-04-06T21:15:13.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2022-10-07T04:58:37.000Z (about 2 years ago)
• Last Synced: 2024-10-15T23:41:08.109Z (about 2 months ago)
• Topics: book, heap, security
• Language: C
• Homepage: https://heap-exploitation.dhavalkapil.com/
• Size: 351 KB
• Stars: 1,241
• Watchers: 44
• Forks: 115
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md

Awesome Lists containing this project

• awesome-hacking-lists - DhavalKapil/heap-exploitation - This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure. (C)

README

        
# Heap Exploitation

This short book is written for people who want to understand the internals of 'heap memory', particularly the implementation of glibc's 'malloc' and 'free' procedures, and also for security researchers who want to get started in the field of heap exploitation.

The first section of the book covers an in-depth, yet concise, description about heap internals. The second section covers some of the most famous attacks. It is assumed that the reader is unfamiliar with this topic. For experienced readers, this text might be good for a quick revision.

- This is not the final version and will keep on updating. For contributing see [this](https://github.com/DhavalKapil/heap-exploitation/blob/master/CONTRIBUTING.md).

- The source code for the book can be found on [GitHub](https://github.com/DhavalKapil/heap-exploitation).

- The canonical URL for the book is .

- You can subscribe for updates on [the book website](https://www.gitbook.com/book/dhavalkapil/heap-exploitation/details).

[Read for free online](https://heap-exploitation.dhavalkapil.com/) (recommended) or download the [PDF](https://www.gitbook.com/download/pdf/book/dhavalkapil/heap-exploitation) or [ePUB](https://www.gitbook.com/download/epub/book/dhavalkapil/heap-exploitation) or [Mobi/Kindle](https://www.gitbook.com/download/mobi/book/dhavalkapil/heap-exploitation) editions.

### Citing heap-exploitation

If you use this book in your research, please use the following BibTex entry:

```

@software{dhaval_kapil_2022_6450612,

  author       = {Dhaval Kapil},

  title        = {DhavalKapil/heap-exploitation},

  month        = apr,

  year         = 2022,

  publisher    = {Zenodo},

  version      = {v1.0.0},

  doi          = {10.5281/zenodo.6450612},

  url          = {https://doi.org/10.5281/zenodo.6450612}

}

```

[![Creative Commons License](https://i.creativecommons.org/l/by-sa/4.0/88x31.png)](http://creativecommons.org/licenses/by-sa/4.0/)

This work is licensed under a [Creative Commons Attribution-ShareAlike 4.0 International License](http://creativecommons.org/licenses/by-sa/4.0/).