Tcademy
Heap exploitation on glibc 2.35: integer underflow to massive heap overflow, and two paths to shell: libc GOT overwrite or House of Apple 2 FSOP.
LA CTF 2026
Featured
All Posts
Narnes and Bobles & Bobles and Narnes
Two type confusion bugs in a Bun bookstore: string price NaN trick, then batch INSERT column inference.
Blogler
YAML anchor aliasing creates a shared reference that bypasses path validation via display_name mutation.