ha1vk's blog

04-30

sleepyHolder_hitcon_2016(fastbin的检查机制+malloc_consolidate+double free)

04-30

huxiangbei_2019_namesystem

04-30

反调试+在栈上伪造堆chunk

04-17

roarctf_2019_easyheap(文件描述符1关闭后仍然可以交互)

04-17

nsctf_online_2019_pwn1

02-26

Signin(calloc不从tcache里取chunk)

02-19

Poisonous_Milk(认清vector的结构+house of orange利用)

02-13

Mirage(fastbin的堆头size位有效只有4字节)

02-09

shaxian

11-20

Babyheap