shellphish/how2heap resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

8796 stars · 1278 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

An educational repository demonstrating a wide range of glibc heap exploitation techniques with annotated C examples. Each technique is versioned against specific glibc releases and can be debugged in the browser.

Use cases

• learn heap exploitation techniques
• study glibc malloc internals for CTF pwn challenges
• find heap exploitation examples for a specific glibc version
• practice binary exploitation and memory corruption
• prepare for pwn challenges in capture the flag competitions

When to choose

• you are learning or teaching heap exploitation on Linux/glibc
• you need reference implementations of techniques like fastbin dup, unsafe unlink, or tcache attacks
• you want version-specific, verified exploit technique examples

When to avoid

• you need a ready-to-use exploitation tool or framework rather than educational examples
• you target non-glibc allocators or non-Linux platforms
• you want general memory safety testing rather than exploitation learning

Facets

learning-resource · maturity active

security developer-tools security education operating-systems cpp c heap-exploitation ctf binary-exploitation glibc-malloc pwn memory-corruption tutorials linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="shellphish/how2heap")