Welcome to HeapLAB Part 1.
My name is Max, and I'm here to take the mystery out of heap
exploitation. It's something that hackers have been doing for over 20 years, starting with the first publicly
documented heap exploit in 1998.
This is an interactive course
so you'll need a Linux host or VM to get the most out of it,
we'll be setting that up later.
We'll start by learning what GLIBC is, what a heap is and how the two are associated, then we'll
set up our environment and dive straight into our first heap exploitation technique known as the House of Force.
For every technique that we learn, we'll start by understanding the heap internals required to figure
it out.
Then we'll move on to turning that technique into an arbitrary write primitive.
And finally, we'll drop a shell using our heap exploitation techniques.
Along the way, you'll face 2 challenge binaries, from which you're expected to drop a shell using what
you've learned so far.
It is technically demanding with a lot to learn,
so don't hesitate to rewind videos and watch them more than once until you're comfortable with each
technique.
So if you're a Capture The Flag player, exploit developer or just interested in weird machines, then
this course is for you.
If you're ready, I'll see you in the next video.