PWN&RE January 20, 2021

六星CTF二进制题解

Words count 208k Reading time 3:09

一、PWN

1、babyheap

一道2.27的新机制的题目

https://www.anquanke.com/post/id/219292

但是直接改bk指针即可,因为和2.31一样

漏洞点:UAF

... Read article

PWN January 03, 2020

堆入门学习知识总结

Words count 29k Reading time 26 mins.

一、堆的分析:

通过系统调用brk和mmap实现malloc内存分配:

thread有个arena空间,可以申请chunk

arena的个数是跟系统中处理器核心个数相关的:

1
2
3
4
For 32 bit systems:
Number of arena = 2 * number of cores + 1.
For 64 bit systems:
Number of arena = 8 * number of cores + 1.

多Arena的管理,可能就会有阻塞,资源的竞争关系

3种数据结构:

... Read article
0%