# Pwn

- [ROP↩️](https://0xten.gitbook.io/public/pwn/rop.md): This section is dedicated to my personal notes on my studies about ROP (return-oriented programming) chains and how to build them.
- [x64 ret2libc](https://0xten.gitbook.io/public/pwn/rop/x64-ret2libc.md): If a binary does not have enough useful gadgets but imports the libc library, we can try to return to libc and call gadgets like system() and execve().
- [Heap⛰️](https://0xten.gitbook.io/public/pwn/heap.md): This section is dedicated to my personal notes on my studies about heap exploitation.
- [jemalloc](https://0xten.gitbook.io/public/pwn/heap/jemalloc.md)
- [Fastbin dup - 2.31](https://0xten.gitbook.io/public/pwn/heap/fastbin-dup-2.31.md)
- [Chunk Overlapping - 2.31](https://0xten.gitbook.io/public/pwn/heap/chunk-overlapping-2.31.md): Overlapping chunks through backwards consolidation on glibc 2.31
- [phoenix](https://0xten.gitbook.io/public/pwn/heap/phoenix.md): This session is dedicated to heap challenges from the phoenix VM from exploit education.
- [heap-zero](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-zero.md): heap-zero is the first heap exploitation exercise from the phoenix vm from exploit education
- [i486](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-zero/i486.md): x86 32bit version of the heap-zero exercise.
- [heap-one](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-one.md): heap-one is the second heap exploitation exercise from the phoenix vm from exploit education
- [i486](https://0xten.gitbook.io/public/pwn/heap/phoenix/heap-one/i486.md): x86 32bit version of the heap-one exercise.
- [Format strings🩸](https://0xten.gitbook.io/public/pwn/format-strings.md): This section is dedicated to my personal notes on my studies about format strings vulnerabilities and how to arb read/write with them.
- [Blind](https://0xten.gitbook.io/public/pwn/format-strings/blind.md): It's possible to pwn a format strings vulnerable binary without even having access to the a local copy of the binary by leaking some important data.
- [Kernel🌽](https://0xten.gitbook.io/public/pwn/untitled.md): This section is dedicated to my personal notes on my studies about kernel exploitation.
- [Browser🤖](https://0xten.gitbook.io/public/pwn/browser.md): This section is dedicated to my personal notes on my studies about heap browser exploitation.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://0xten.gitbook.io/public/pwn.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.