HeapLayout | Source code for paper 'Automatic Heap Layout Manipulation

HeapLayout is a C library. HeapLayout has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

Here you will find the source code related to my paper titled Automatic Heap Layout Manipulation for Exploitation, published at USENIX Security 2018. The code in this repository is not exactly that which was used to generate the results in that paper. I have since fixed a few bugs, and made some other improvements. However, it should produce essentially the same results. The most recent version of the paper can be found in this repository as usenix18-heelan.pdf, and a recording of the presentation and the slides can be found on the USENIX website. The Sieve subdirectory contains the source code for SIEVE, a framework for evaluating heap layout manipulation algorithms on synthetic benchmarks. The Shrike subdirectory contains the source code for SHRIKE, a proof-of-concept template-based exploit generation system, targeting the PHP language interpreter. SHRIKE allows you to write an exploit containing 'holes' where heap layout manipulation needs to take place. This partial exploit is then taken by SHRIKE and completed. The strength of this approach is that it allows a human exploit developer to focus on the creative part of the exploit development process, while letting the machine use its raw reasoning power to solve the complex but tedious task of heap layout manipulation.