Two effects of tcache-stashing-unlink-attack

The effect achieved by tcache stashing unlink attack is somewhat similar to unsortedbin attack. It can write a larger number to any address. If the structure is reasonable, any address allocation chunk can also be achieved. malloc.c : line 3635 if (in_smallbin_range (nb)) {<!– –> idx = smallbin_index (nb); bin = bin_at (av, idx); if […]

[Linux] Process Communication Part I: Pipeline process pipe, mkfifo, unlink

Article directory 1. Anonymous channels 1. Create a pipeline pipe 2. Characteristics of the pipeline 3. Four scenarios 2. Named pipes 1. Linux command: mkfifo (creation of named pipes) 2. Function mkfifo 3. Function unlink 4. Named pipe code example Inter-process communication: Inter-Process Communication, abbreviated as IPC 1. Anonymous pipe 1. Create a pipeline head […]

Item 37: Make objects of type std::thread unlinkable on all paths

Every object of type std::thread is in one of two states: joinable or unjoinable. A joinable std::thread corresponds to the underlying asynchronously running or runnable thread. If the underlying thread corresponding to an object of type std::thread is blocked or waiting to be scheduled, it can be joined. The underlying thread corresponding to an object […]

Unsafe Unlink: unlink exploit

Author: cxing Date: May 12, 2023 Unlink in GLIBC 2.35 As we all know, the heap manager of glibc mainly uses the linked list structure to maintain chunks, especially the unlinking operation of the doubly linked list in bins is called unlink. In the old version of glibc, unlink is defined as a macro, while […]

Heap overflow – unlink vulnerability attack (bamboobox)

Take your own title: Link: https://pan.baidu.com/s/1S9xbAWhFw0xFqFyQTACqLA?pwd=vvud Extraction code: vvud Introduction: I finally learned Unlink. I have to say that it is much more difficult than the stack. It is really fun to learn. An unlink vulnerability did take me a lot of time. I will write a blog after a little tidying up. When can […]

[Solved] vue start project error Error EPERM operation not permitted, unlink

After using npm install to install dependencies, sometimes there are network or other problems that cannot install individual dependencies, the project fails, and an error is reported Error when starting the project: Error: EPERM: operation not permitted, unlink This problem has been troubled for a long time. At first, I thought that the problem similar […]