Skip to content

Commit be807f1

Browse files
committed
f
1 parent e8f19ac commit be807f1

1 file changed

Lines changed: 1 addition & 3 deletions

File tree

  • src/binary-exploitation/libc-heap/use-after-free

src/binary-exploitation/libc-heap/use-after-free/first-fit.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -106,9 +106,7 @@ Exploitation recipe (common in recent CTFs):
106106
4. **Allocate** again – the leftover part overlaps with an existing in-use chunk → UAF.
107107
5. Overwrite sensitive fields (function pointers, FILE vtable, etc.)
108108

109-
A practical application can be found in the 2024 HITCON Quals *Setjmp* challenge where this exact primitive is used to pivot from a UAF to full control of `__free_hook`.{{#ref}}
110-
../../../../references/2024_setjmp_firstfit.md
111-
{{#endref}}
109+
A practical application can be found in the 2024 HITCON Quals *Setjmp* challenge where this exact primitive is used to pivot from a UAF to full control of `__free_hook`.
112110

113111
---
114112
### 🛡️ Mitigations & Hardening

0 commit comments

Comments
 (0)