{"type":"rich","height":"190","provider_name":"Hatena Blog","url":"https://ptr-yudai.hatenablog.com/entry/2020/04/02/013910","provider_url":"https://hatena.blog","version":"1.0","categories":["CTF"],"blog_url":"https://ptr-yudai.hatenablog.com/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fptr-yudai.hatenablog.com%2Fentry%2F2020%2F04%2F02%2F013910\" title=\" House of Husk (\u4eee) - CTF\u3059\u308b\u305e\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_name":"ptr-yudai","blog_title":"CTF\u3059\u308b\u305e","title":" House of Husk (\u4eee)","image_url":null,"width":"100%","published":"2020-04-02 01:39:10","description":"\u306f\u3058\u3081\u306b \u30d2\u30fc\u30d7\u5927\u5acc\u3044\u306a\u306e\u3067\u3059\u304c\u3001\u591a\u5206\u307e\u3060\u8ab0\u3082\u516c\u958b\u3057\u3066\u3044\u306a\u3044\u30d2\u30fc\u30d7\u7cfbexploit\u624b\u6cd5\u3092\u601d\u3044\u3064\u3044\u305f\u306e\u3067\u66f8\u304d\u307e\u3059\u3002 \u8abf\u3079\u3066\u3082\u51fa\u3066\u3053\u306a\u304b\u3063\u305f\u306e\u3067\u65e2\u51fa\u3058\u3083\u306a\u3044\u3068\u4fe1\u3058\u3066\u300cHouse of Husk\u300d\u3068\u540d\u524d\u3092\u4ed8\u3051\u307e\u3057\u305f\u3002 \u3053\u308c\u7cfb\u306b\u547d\u540d\u898f\u5247\u304c\u3042\u308b\u306e\u304b\u4e0d\u660e\u3060\u3057\u540d\u524d\u3082\u601d\u3044\u3064\u304b\u306a\u3044\u306e\u3067\u3055\u3063\u304d\u898b\u3066\u3044\u305f\u30a2\u30cb\u30e1\u306e\u30ad\u30e3\u30e9\u30af\u30bf\u30fc\u304b\u3089\u53d6\u308a\u307e\u3057\u305f\u3002 \u5de8\u5927\u306a\u30c1\u30e3\u30f3\u30af\u304cmalloc\u3067\u304d\u3066UAF\u304c\u3042\u308b\u3068\u304d\u3001\u5f93\u6765\u3088\u308a\u3082\u5358\u7d14\u3067malloc\u3084free\u306e\u56de\u6570\u3092\u6291\u3048\u3066\u30b7\u30a7\u30eb\u3092\u53d6\u308c\u308b\u624b\u6cd5\u3067\u3059\u3002 PoC: github.com English version: ptr-yudai.hatenablog.com \u306f\u3058\u3081\u306b House of Hus\u2026","author_url":"https://blog.hatena.ne.jp/ptr-yudai/"}