Adding DEFCON 2017 Unsafe Unlink example #40
Conversation
|
I'm not really sure that we need an exhaustive list of examples on the margin -- one or two seem fine, and this one already has two... @rhelmot, what do you think? Does this example add something the other two don't provide? |
|
This challenge is pretty distinct from the other ones in this category - I'd argue it should be in its own category. This challenge used a basic bare-bones dlmalloc, i.e. the same system as glibc, except without any of the hardening checks. The result is that you get the sort of really really basic unsafe-unlink, like what Giovanni teaches in his security course. |
|
Just noticed this was still open. I think it makes sense to have an "other examples" table, maybe with a brief description (such as what rhelmot typed up in the comment here). @Owlz, feel up to it? |
|
With the new structure, we could actually add this as a technique for dlmalloc? (Being the first non-glibc technique then) |
No description provided.