Installs into .claude/skills of the current project.
Are you the author of Heap Exploitation?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/0dayinc-heap-exploitation)
---
name: heap-exploitation
description: Use when exploiting glibc heap. Debugger and REDB steps for tcache.
---
# Heap exploitation (tcache / fastbin)
1. `PWN::Plugins::REDB.open(bin: path)` then `xrefs_to(sym: 'malloc')` and `xrefs_to(sym: 'free')`.
2. `PWN::Plugins::Debugger.launch(bin: path)` then `break(addr_or_sym: 'main')` and `run`.
3. Use `cyclic` / `cyclic_find` to locate overflow into tcache metadata (`tcache_perthread_struct`).
4. Confirm with `regs` and `read_mem` after `continue`. Write the proof via `Findings.record`.
