System Hacking - glibc 2.31+
0.0
(0)
Tier 2 Medium Skill Path System Hacking
This Path teaches advanced system hacking techniques using libraries in glibc 2.31 and later.. Through step-by-step exercises, you’ll gain the analysis and exploitation skills needed for CTF competitions and real-world security research.
System Hacking - glibc 2.31+
0.0
(0)
Tier 2 Medium Skill Path System Hacking
This Path teaches advanced system hacking techniques using libraries in glibc 2.31 and later.. Through step-by-step exercises, you’ll gain the analysis and exploitation skills needed for CTF competitions and real-world security research.
0% Completed Total 0 completed
Lecture 0 /13
13
Wargame 0 /6
6
You can access locked objectives by upgrading your plan or purchasing the units separately.
The Lab is a practice and is not included in the overall progress.

Why It's Worth Your Time

glibc is the core library used by programs running on Linux, responsible for critical functions like heap management and file I/O. Because of this, it has long been a prime target for attackers and a key focus in exploit research. In fact, glibc-based exploits frequently appear in both CTF competitions and real-world hacking scenarios. However, as security protections evolve, many traditional exploit methods have become harder to use, driving the need for new, advanced techniques.
This Path covers advanced system hacking techniques using libraries in environments with glibc 2.31 or later. You’ll gain the practical knowledge required for today’s CTF challenges and real-world security research. This Skill Path will be updated with additional Units as needed.

Topics Covered

  • Libc GOT Overwrite
  • File Stream Oriented Programming (FSOP)
  • Hands-on exercises for each attack technique

Recommended For

  • Learners who want to master system exploitation using the latest glibc
  • CTF participants tackling advanced challenges
  • Aspiring vulnerability researchers, exploit developers, or security professionals
  • Students who already know basic heap exploitation and want to advance to bypassing modern mitigations

Prerequisite Knowledge

  • Understanding of basic system exploitation techniques
  • Knowledge of C/C++ programming and memory structures
  • Familiarity with assembly language and debugging tools (gdb, pwndbg, etc.)
Unit Composition
Total 5 units
  1. 1
    200 Coin
    9.5
    (8)
    200 Coin
    Learn the GOT Overwrite attack on the .got.plt section of libc, a technique effective up to glibc 2.38.
    libc GOT Overwrite
    Libc.so .got.plt
    [Exercise] libc GOT Overwrite
    Exploit Tech: libc.so .got.plt
    Libc GOT Overwrite
  2. 2
    200 Coin
    9.6
    (5)
    200 Coin
    Learn Tcache Stashing Attack technique, targeting Stashing mechanism in glibc heap.
    Tcache Stashing Unlink
    Tcache Stashing Unlink
    [Exercise] Tcache Stashing Unlink
    Exploit Tech: Tcache Stashing Unlink
    Tcache Stashing Unlink
  3. 3
    10.0
    (5)
    200 Coin
    10.0
    (5)
    200 Coin
    Learn attach techniques targeting __exit_funcs in exit().
    __exit_funcs Overwrite
    __exit_funcs
    [Exercise] __exit_funcs Overwrite
    Exploit Tech: __exit_funcs Overwrite
    __run_exit_handlers
  4. 4
    200 Coin
    10.0
    (3)
    200 Coin
    Learn attach techniques targeting tls_dtor_list in exit().
    tls_dtor_list
    tls_dtor_list
    [Exercise] tls_dtor_list
    Exploit Tech: tls_dtor_list Overwrite
    __call_tls_dtors
  5. 5
    350 Coin
    10.0
    (4)
    350 Coin
    Learn mechanisms and applications of File Stream Oriented Programming (FSOP) technique.
    File Stream Oriented Programming (FSOP)
    Background: _IO_FILE Structure
    _IO_FILE Arbitrary Code Execution
    FSOP via _IO_cleanup()
    [Exercise] FSOP Tutorial
    Exploit Tech: FSOP Tutorial
    FSOP Tutorial
    [Exercise] FSOP Adaptation
    Exploit Tech: FSOP Adaptation
    FSOP Adaptation
Reviews
0.0 (0)
0% Completed Total 0 completed
Lecture 0 /13
13
Wargame 0 /6
6
You can access locked objectives by upgrading your plan or purchasing the units separately.
The Lab is a practice and is not included in the overall progress.