Heap Exploitation

When you're exploiting heap vulnerabilities in glibc binaries, this skill gives you a structured playbook for ptmalloc2 attacks across different libc versions. It covers the primitives (UAF, double free, overflow, off-by-one) and maps them to techniques like tcache poisoning, fastbin dup, and House of Botcake, with version-specific guidance on what changed when safe-linking arrived in 2.32 and hooks disappeared in 2.34. The quick reference tables for chunk layout, bin types, and leak methods are solid, and the decision tree at the end helps you pick an attack path based on your primitive and target version. Base models tend to confuse version constraints and miss the safe-linking XOR encoding, so having this context loaded prevents a lot of trial and error during CTFs or research.

Install to Claude Code

npx -y skills add yaklang/hack-skills --skill heap-exploitation --agent claude-code