Why It's Worth Your Time
glibc is the core library used by programs running on Linux, responsible for critical functions like heap management and file I/O. Because of this, it has long been a prime target for attackers and a key focus in exploit research. In fact, glibc-based exploits frequently appear in both CTF competitions and real-world hacking scenarios. However, as security protections evolve, many traditional exploit methods have become harder to use, driving the need for new, advanced techniques.
This Path covers advanced system hacking techniques using libraries in environments with glibc 2.31 or later. You’ll gain the practical knowledge required for today’s CTF challenges and real-world security research. This Skill Path will be updated with additional Units as needed.
Topics Covered
- Libc GOT Overwrite
- File Stream Oriented Programming (FSOP)
- Hands-on exercises for each attack technique
Recommended For
- Learners who want to master system exploitation using the latest glibc
- CTF participants tackling advanced challenges
- Aspiring vulnerability researchers, exploit developers, or security professionals
- Students who already know basic heap exploitation and want to advance to bypassing modern mitigations
Prerequisite Knowledge
- Understanding of basic system exploitation techniques
- Knowledge of C/C++ programming and memory structures
- Familiarity with assembly language and debugging tools (gdb, pwndbg, etc.)
- 1
- 2
- 3
- 4
- 5File Stream Oriented Programming (FSOP)Background: _IO_FILE Structure_IO_FILE Arbitrary Code ExecutionFSOP via _IO_cleanup()[Exercise] FSOP TutorialExploit Tech: FSOP TutorialFSOP Tutorial[Exercise] FSOP AdaptationExploit Tech: FSOP AdaptationFSOP Adaptation