pwn

RE & Pwn

House of Orange

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

House of Lore

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

House of Mind

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

FILE Struct Leaks: Turning fread/fwrite into Arbitrary Read/Write

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Exit Handlers: Abusing __run_exit_handlers and TLS dtor lists

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

FSOP in Modern glibc: House of Apple 2

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

House of Spirit

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

House of Prime

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

House of Force

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

_IO_FILE Exploitation: FSOP Fundamentals

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Abusing _IO_FILE vtables: _IO_str_jumps and Validation

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Defeating ASLR, NX, and Stack Canaries: A Practical Exploitation Primer

How modern memory-protection layers (ASLR, NX, canaries) work and how attackers chain leaks, ret2libc, and brute force to bypass them.
RE & Pwn

Return-Oriented Programming (ROP) Fundamentals: From Gadgets to ret2syscall

A practical introduction to ROP: gadgets, ROPgadget, ret2libc, ret2syscall, stack pivots, and the defenses that stop them.
RE & Pwn

Format String Vulnerabilities Explained: From %p Leaks to Arbitrary Write

A practical walkthrough of format string bugs: leaking memory with %p, writing with %n, and pivoting to GOT overwrite.
RE & Pwn

Heap Exploitation: Use-After-Free and tcache Poisoning in glibc

A practical walkthrough of UAF and tcache poisoning in glibc malloc, with PoC, gdb commands, and blue-team defenses.