Security & Compliancezhaoxuya520/reverse-skill
pwn-chain
End-to-end engineering approach from reverse engineering to working exploit.
Applicable scenarios: You have obtained the binary, vulnerability point, and target environment, and need to write a stable exploit (not a script that only works locally but crashes immediately when used remotely).
Covers three major areas: stack overflow / heap exploitation / kernel pwn. Emphasizes the engineering gap between "CTF local success → stable remote execution in real scenarios": libc version mismatch, heap spray timing, SMEP/SMAP/KASLR, stack alignment, remote buffering.
Core toolchain: pwntools + GEF/pwndbg + ROPgadget/Ropper + one_gadget + libc-database + qemu-system kernel debugging.
Trigger keywords: pwn, stack overflow, heap overflow, ROP, ret2libc, ret2csu, one_gadget, libc-database, heap exploitation, tcache, fastbin, unsorted bin, kernel pwn, kROP, SMEP, SMAP, KASLR, modprobe_path, pwntools, GEF, pwndbg.