Security Research

by Alexander Sotirov

Navigation

Resources

Latest posts

• Assured Exploitation 2011
• You Should Work for Symantec
• CSAW final challenge
• CSAW reversing challenge
• Darknet design

Archives

• 2011 | 2010 | 2009 | 2008

Follow

• Twitter
• Blog feed

Contact

• alex@sotirov.net
• PGP key

Meet me at

• CanSecWest

  Vancouver, Mar 9-11

• Infiltrate

  Miami Beach, Apr 16-17

Heap Feng Shui in JavaScript

Downloads:

• Slides
• Video from BlackHat USA 2007

A paper with an in-depth description of the Heap Feng Shui exploitation technique and the source code of the HeapLib library are available in the research section of this site.

Presented at:

• BlackHat Europe, March 2007, Amsterdam
• SyScan, July 2007, Singapore
• BlackHat USA, August 2007, Las Vegas