stong/how-to-exploit-a-double-free
View on GitHub ↗ ★ 1,390 Python
How to exploit a double free vulnerability in 2021. Use After Free for Dummies
4 mentions on Hacker News by 4 people: 1 story, 3 comments · first 2021-10-26 · latest 2023-09-22
20082026
-
…up memory strategically and/or rop gadget jump addresses. None of this looks like real payloads. https://github.com/stong/how-to-exploit-a-double-free The analogy to firewalls is that you would specify the exact condition of the input for…
comment by ActorNightly · 2023-09-22 · in The urgent need for memory safety in software products -
…any shellcode. Mitigations have made exploitation much, much more complex nowadays. See for example https://github.com/stong/how-to-exploit-a-double-free
comment by tmsbrg · 2021-12-15 · in A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution -
…instance of guaranteed copy elision. Also a bit weird to see, but not an issue of correctness. [0] https://github.com/stong/how-to-exploit-a-double-free#0-inte... [1] https://github.com/stong/how-to-exploit-a-double-free#2-rece...
comment by vitus · 2021-10-26 · in A bug that doesn’t exist on x86: Exploiting an ARM-only race condition -
▲ 291
A bug that doesn’t exist on x86: Exploiting an ARM-only race conditionstory by stong1 · 2021-10-26 · 134 comments