Dreamhack
Glibc
2025
- fflush() can arbitrary readable by FSOP
- how ld , libc load to memory & how ASLR work - ld,libc
- how heap load to memory & what is brk & how ASLR work - heap
- Linux x86-64 Process virtual memory layout shortcut
- top chunk consolidation
- what is unsorted bin , small bin, large bin → bin ) (deep analyze ) & libc leak
- what is safe-linking in heap & bypss
- heap Enhanced Security ( each glibc version )
- what is house of apple
- _IO_SYSWRITE , _IO_SYSREAD , _IO_overflow , _IO_underflow , _IO_flush diff
- glibc analyize
- what is glibc Relocation section
- one_gadget requirement fulfill - glibc got overwrite
- what is glibc IFUNC
- what is house of force
- what is house of spirit
- what is va_start in printf
- how malloc work
- what is IO_validate_vtable & _IO_vtable_check & _IO_*_jumps
- how to bypass IO_validate_vtable by _IO_str_overflow
- how to Arbitrary read in fwrite by FSOP
- what is _IO_acquire_lock in FSOP
- glibc with vtable
- what is _IO_buf_base & vulnerability
- glibc with file function
- how program start
- how program end
- what is _IO_FILE & _IO_FILE_plus
- what is iofile_vtable 2
- how to get glibc debugging sysmbols
- __run_exit_handlers free hook overwrite
- libc inner plt & got and exploit