The toddler’s introduction to Heap Exploitation, FastBin Dup Consolidate (Part 4.2)

In this post we are going to trigger a FastBin consolidation which we are going to combine with a double free vulnerability (dup) in order to return a pointer to an already allocated chunk. By consolidation we refer to the process of merging adjacent free chunks and placing them to the unsorted bin for future allocations.

As always, please find below the references to my previous posts relative to heap exploitation:

• The toddler’s introduction to Heap Exploitation (Part 1)
• The …

exploitation heap-exploitation