AES加密算法识别花指令pieret2libcone_gadgetret2csuvm pwnstrcmp绕过patchelfstack overflowCanaryfmtstrSropBlock box testingAssembly languageheap overflowfast bin attack堆溢出malloc_hookrealloc_hookrealloc调节栈帧Tcache attackglibc-all-in-oneropchainret2syscallshellcodeuafunsorted binunsorted bin attackHouse of Orange伪随机数GOT劫持off by oneunlinkcanaryTcacheHouse of appleheapIO_FILEUAFLarge_bins_attack