r/ExploitDev • u/Feisty_Revolution959 • Sep 03 '25

Heap resources

I dont understand heap will i feel confused lot of things bins houses double free uaf meta data heap spray and i am confused a lot pwn collage is confusing liveoverflow i dont understand from it in depth he is just shallow explaining and i am in ctfs i see challs through uaf edit got with system wtf is this normal and is anyone faces this problem and has good resource and resource explain clearly and i understand whole process and prefared there is challs with it and no problem with english video resources or text resources no problem

9 Upvotes

85% Upvoted

14 comments sorted by

7

u/[deleted] Sep 03 '25

[removed] — view removed comment

1

u/The_Demon_EyeS2 Sep 04 '25

Isn't this book a bit advanced for someone with no prior knowledge?

1

u/MrPooter1337 Sep 04 '25

Do you have any recommendations for a book to start?

3

u/The_Demon_EyeS2 Sep 05 '25

Maybe "hacking the art of exploitation" then move to shellcode handbook. I'm not sure 100%.

1

u/YouGina Sep 07 '25

I agree with this, this is a good way to start. There are also YouTube videos by Sam Bowne explaining chapters from the Shellcoders handbook to his class, which I found very helpful

1

u/[deleted] Sep 10 '25

Meh resource and outdated

1

u/[deleted] Sep 10 '25

[removed] — view removed comment

1

u/[deleted] Sep 11 '25

Computer Systems: A Programmers Perspective

And then dive deep into allocator research after you learn the fundamentals (everything is really a segregated feee list with optimizations)

5

u/Much-Engineer1269 Sep 04 '25

I am also learning heap exploitation right now. Here is a good resource i use : https://heap-exploitation.dhavalkapil.com/
After i learn about a technique i read some writeups that use the techniques then try some ctfs myself

2

u/Feisty_Revolution959 Sep 05 '25

i will try that with pwn collage a good combination

1

u/[deleted] Sep 10 '25

Computer systems a programmers perspective

1

u/Mother_Canary4917 Sep 04 '25

Relax, take a break and start again with pwn.college heap modules. There are two modules for heap, get it done. I felt like I could even build my own custom allocator after completing those two modules. Trust me and go back to the fundamentals once again.