Skip to content

Add House of Mandarin (glibc 2.24/2.25) - #243

Open
Horia-F wants to merge 1 commit into
shellphish:masterfrom
Horia-F:master
Open

Horia-F wants to merge 1 commit into
shellphish:masterfrom
Horia-F:master

Conversation

@Horia-F

@Horia-F Horia-F commented Sep 17, 2026

Copy link
Copy Markdown

Adds House of Mandarin for glibc 2.24/2.25.
After FILE vtable validation broke classic House of Orange, this keeps the unsorted-bin part but uses the legitimate _IO_wfile_jumps and pivots through the wide-data path.
Requires heap overflow into top + libc/heap leaks.
Write-up: https://horia-f.github.io/posts/house-of-mandarin.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant