Posts

"No Way To Prevent This," Says Only Allocator Where This Regularly Happens

A quick look at modern-day defenses against heap exploitation.

Cracking 12-character `.zip` passwords, exploiting a buggy frequency analysis program, and escalating Python's `.format()` to RCE for the first time ever.

A cheatsheet for the pwntools library commonly used for binary exploitation

A short reference guide on how to leak database metadata with various database software