WireFisher

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <pthread.h>
#include <sys/mman.h>

#include <IOKit/IOKitLib.h>
#include <CoreFoundation/CFPropertyList.h>

const char* kMyDriversIOKitClassName = "io_oooverflow_IPwnKit";

romanking98

Table of Contents

1. Disclamair
2. House Of Roman
   ------> 2.1 Assumptions
   ------> 2.2 Protections
   ------> 2.3 Quick Walkthrough
   ------> 2.4 Setting the FD to malloc_hook
   ------> 2.5 Fixing the 0x71 freelist
   ------> 2.6 Unsorted Bin attack on malloc_hook

20esaua

text = 'Once upon a time in the land of Tigernet there lived a wise, but $adjective wizard named James. In his dominion was all kinds of electronic $nouns and $nouns. One day, the wizard Fulton declared, \'Let us make a giant balloon and adorn it with such devices as $nouns, $adjective $nouns, and $adjective $nouns. With these devices we will measure the curvature of the $noun - a $adjective but important scientific inquiry.\' So the many citizens of Tigernet embraced the $adjective mission of their leader and began the $adjective and $adjective task of building the $nouns. They used $adjective tools to make $quantity $adjective $nouns - some were $adjective while others were $adjective. They worked $adverb for $quantity days and nights. Finally, the day came to launch. They filled the $adjective balloon and watched it $adverb rise into the $adjective $adjective sky. It was a beautiful sight.'

for wordtype in {'noun', 'verb', 'adjective', 'adverb', 'quantity'}:
    for _ in range(text.count('$%s' % wordtype)