> For the complete documentation index, see [llms.txt](https://0xten.gitbook.io/public/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xten.gitbook.io/public/pwn.md).

# Pwn

- [ROP↩️](https://0xten.gitbook.io/public/pwn/rop.md): This section is dedicated to my personal notes on my studies about ROP (return-oriented programming) chains and how to build them.
- [x64 ret2libc](https://0xten.gitbook.io/public/pwn/rop/x64-ret2libc.md): If a binary does not have enough useful gadgets but imports the libc library, we can try to return to libc and call gadgets like system() and execve().
- [Heap⛰️](https://0xten.gitbook.io/public/pwn/heap.md): This section is dedicated to my personal notes on my studies about heap exploitation.
- [jemalloc](https://0xten.gitbook.io/public/pwn/heap/jemalloc.md)
- [Fastbin dup - 2.31](https://0xten.gitbook.io/public/pwn/heap/fastbin-dup-2.31.md)
- [Chunk Overlapping - 2.31](https://0xten.gitbook.io/public/pwn/heap/chunk-overlapping-2.31.md): Overlapping chunks through backwards consolidation on glibc 2.31
- [phoenix](https://0xten.gitbook.io/public/pwn/heap/phoenix.md): This session is dedicated to heap challenges from the phoenix VM from exploit education.
- [heap-zero](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-zero.md): heap-zero is the first heap exploitation exercise from the phoenix vm from exploit education
- [i486](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-zero/i486.md): x86 32bit version of the heap-zero exercise.
- [heap-one](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-one.md): heap-one is the second heap exploitation exercise from the phoenix vm from exploit education
- [i486](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-one/i486.md): x86 32bit version of the heap-one exercise.
- [Format strings🩸](https://0xten.gitbook.io/public/pwn/format-strings.md): This section is dedicated to my personal notes on my studies about format strings vulnerabilities and how to arb read/write with them.
- [Blind](https://0xten.gitbook.io/public/pwn/format-strings/blind.md): It's possible to pwn a format strings vulnerable binary without even having access to the a local copy of the binary by leaking some important data.
- [Kernel🌽](https://0xten.gitbook.io/public/pwn/untitled.md): This section is dedicated to my personal notes on my studies about kernel exploitation.
- [Browser🤖](https://0xten.gitbook.io/public/pwn/browser.md): This section is dedicated to my personal notes on my studies about heap browser exploitation.