> For the complete documentation index, see [llms.txt](https://b0ldfrev.gitbook.io/note/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://b0ldfrev.gitbook.io/note/pwn.md).

# PWN

- [\_\_libc\_csu\_init函数的通用gadget](https://b0ldfrev.gitbook.io/note/pwn/libccsuinit-han-shu-de-tong-yong-gadget.md)
- [\_int\_malloc源码分析](https://b0ldfrev.gitbook.io/note/pwn/_int_malloc.md)
- [\_IO\_FILE利用思路总结](https://b0ldfrev.gitbook.io/note/pwn/iofile-li-yong-si-lu-zong-jie.md)
- [C++ 虚表分析](https://b0ldfrev.gitbook.io/note/pwn/c++-xu-biao-fen-xi.md)
- [Fast\_bin笔记](https://b0ldfrev.gitbook.io/note/pwn/fastbin-bi-ji.md)
- [house\_of\_force](https://b0ldfrev.gitbook.io/note/pwn/house_of_force.md)
- [House\_of\_Roman](https://b0ldfrev.gitbook.io/note/pwn/house_of_roman.md)
- [Linux\_ShellCode](https://b0ldfrev.gitbook.io/note/pwn/linux_shellcode.md)
- [Return-to-dl-resolve原理及利用](https://b0ldfrev.gitbook.io/note/pwn/returntodlresolve-yuan-li-ji-li-yong.md)
- [Unlink利用原理](https://b0ldfrev.gitbook.io/note/pwn/unlink.md)
- [Unsorted\_Bin\_Attack](https://b0ldfrev.gitbook.io/note/pwn/unsorted_bin_attack.md)
- [获取libc方法](https://b0ldfrev.gitbook.io/note/pwn/huo-qu-libc-fang-fa.md)
- [利用main\_arena泄露libc基址](https://b0ldfrev.gitbook.io/note/pwn/li-yong-mainarena-xie-lou-libc-ji-zhi.md)
- [整数溢出](https://b0ldfrev.gitbook.io/note/pwn/zheng-shu-yi-chu.md)
- [重写.fini\_array函数指针](https://b0ldfrev.gitbook.io/note/pwn/zhong-xie-.finiarray-han-shu-zhi-zhen.md)
- [Windows\_SEH利用](https://b0ldfrev.gitbook.io/note/pwn/windowsseh-li-yong.md)