Heap Exploitation
When you're exploiting heap vulnerabilities in glibc binaries, this skill gives you a structured playbook for ptmalloc2 attacks across different libc versions. It covers the primitives (UAF, double free, overflow, off-by-one) and maps them to techniques like tcache poisoning, fastbin dup, and House of Botcake, with version-specific guidance on what changed when safe-linking arrived in 2.32 and hooks disappeared in 2.34. The quick reference tables for chunk layout, bin types, and leak methods are solid, and the decision tree at the end helps you pick an attack path based on your primitive and target version. Base models tend to confuse version constraints and miss the safe-linking XOR encoding, so having this context loaded prevents a lot of trial and error during CTFs or research.
- skills.sh installs
- 3.9K
- GitHub stars
- 2.6K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add yaklang/hack-skills --skill heap-exploitation --agent claude-codeInstalls into .claude/skills of the current project.
Files
SKILL: Heap Exploitation — Expert Attack Playbook
AI LOAD INSTRUCTION: Expert glibc heap exploitation techniques. Covers ptmalloc2 internals, bin structures, tcache mechanics, libc/heap leak methods, and attack selection by glibc version. Distilled from ctf-wiki heap sections, how2heap, and real-world exploitation. Base models often confuse glibc version constraints and miss safe-linking (PROTECT_PTR) introduced in 2.32.
0. RELATED ROUTING
- stack-overflow-and-rop — when the overflow is on the stack rather than the heap
- format-string-exploitation — leak heap/libc addresses via format string
- arbitrary-write-to-rce — convert heap arbitrary write into code execution
- binary-protection-bypass — bypass ASLR/RELRO to use heap write effectively
Advanced References
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/yaklang/hack-skills
- First seen
- Jun 3, 2026
