how2heap is an educational repository for learning heap exploitation techniques.
The repository addresses the challenge of understanding how to exploit heap memory vulnerabilities by providing practical, working examples of various attack methods. Each technique is implemented in C and verified against Ubuntu's Libc releases to ensure accuracy and relevance. The approach grounds learning in real-world conditions by using the same Libc versions that developers encounter in production systems, allowing learners to study actual vulnerable code paths rather than theoretical constructs.
The repository suits security researchers, penetration testers, and developers building exploit mitigations who need hands-on experience with heap attacks. It works best for those learning systematically through concrete examples rather than reading about techniques in isolation. The interactive debugging capability, which allows techniques to be stepped through in a browser using gdb, lowers the barrier to experimentation and makes it accessible to learners without complex local debugging setups.
The project maintains a focused collection of verified techniques tied to specific Ubuntu Libc versions, ensuring that examples remain functional and relevant across different system configurations. Development activity shows consistent attention to keeping techniques current with the Libc versions in active use, reflecting a commitment to practical applicability rather than historical coverage alone.
