Heap Exploitation

When you're exploiting heap vulnerabilities in glibc binaries, this skill gives you a structured playbook for ptmalloc2 attacks across different libc versions. It covers the primitives (UAF, double free, overflow, off-by-one) and maps them to techniques like tcache poisoning, fastbin dup, and House of Botcake, with version-specific guidance on what changed when safe-linking arrived in 2.32 and hooks disappeared in 2.34. The quick reference tables for chunk layout, bin types, and leak methods are solid, and the decision tree at the end helps you pick an attack path based on your primitive and target version. Base models tend to confuse version constraints and miss the safe-linking XOR encoding, so having this context loaded prevents a lot of trial and error during CTFs or research.

skills.sh installs: 3.9K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill heap-exploitation --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Heap Exploitation — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert glibc heap exploitation techniques. Covers ptmalloc2 internals, bin structures, tcache mechanics, libc/heap leak methods, and attack selection by glibc version. Distilled from ctf-wiki heap sections, how2heap, and real-world exploitation. Base models often confuse glibc version constraints and miss safe-linking (PROTECT_PTR) introduced in 2.32.