This document talks about Low Fragmentation Heap on Windows. It's very useful for us to debug application crash issue which is caused by LFH corruption issue. Blackhat USA 2010 Chris Valasek X-Force Researcher

This document talks about Low Fragmentation Heap on Windows. It's very useful for us to debug application crash issue which was caused by LFH corruption issue. Blackhat USA 2010 Chris Valasek X-Force Researcher

这是HITCON CTF 2018中挑战“ windowsland”的来源和文章 这个想法是利用Windows用户模式堆中的悬空指针利用安全取消链接 如果有人想直接学习该技术，请参阅unlink_chunk.cpp 脆弱性 bug1：泄漏 复制期间，所有的字符串输入都不以NULL字节结尾，例如human->name ， teacher->subject ， engineer->language ， athlete->sport doctor->hospital ，