https://cyberdream.blog/tags/heap-exploitation/ Recent content in Heap-Exploitation on cyberdream.blog Hugo en Fri, 07 Aug 2026 11:52:47 +0000 https://cyberdream.blog/posts/heap-exploitation-lab-01-house-of-force/ Fri, 07 Aug 2026 11:52:47 +0000 https://cyberdream.blog/posts/heap-exploitation-lab-01-house-of-force/ <h2 id="introduction"> Introduction <a class="heading-link" href="#introduction"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Most heap exploitation tutorials focus on isolated CTF challenges or a single binary with one bug and a clear path to the flag. Real embedded firmware is different. Vulnerabilities are spread across multiple handlers, exploitation requires chaining several bugs together, and you&rsquo;re working against an allocator with its own quirks and version-specific behaviors.</p> <p>To bridge that gap, I built a practice target from scratch using Claude: a deliberately vulnerable HTTP server modeled after the kind of <code>httpd</code> daemons found in consumer routers. This post walks through the target design, the vulnerabilities I embedded in it, and the full exploit chain I developed: from information leak to remote code execution using the House of Force technique against glibc 2.23.</p>