Heap Exploitation Development

Goal: turn a heap bug into a repeatable primitive and then into the right endgame for that allocator/version, not the most nostalgic House name.

When to activate

• Heap overflow, off-by-one, UAF, double-free, arbitrary free, overlapping chunk, or stale-pointer bug touches heap-managed objects.
• Need allocator-aware exploit design instead of generic memory corruption advice.
• Need to choose between tcache poisoning, bin corruption, FSOP, setcontext/ROP, or data-only outcomes.
• Linux target may use glibc, musl, or custom allocators.
• Windows target uses the default process heap, a private heap, LFH, VS, or Segment Heap.

First classify the environment