Extendable Visualization & Exploitation tool for glibc heap.
vHeap is a python/js project aimed at visualizing the glibc heap memory at runtime during your debugging sessions to make your life easier ✨.
The heap memory is one of those things that are much easier to work with and learn when visualized. Most security researchers/ctf players end up sketching the heap memory to exploit it.
This vHeap version is built to work with pwndbg on GDB (requires GDB v11 and higher).
Clone and install pwndbg then
git clone https://github.com/wes4m/vheap.git
cd vheap
./setup.sh PWNDBG_PATH
To start serving; from within your GDB session vHeap shows you everything in the webbrowser.
vhserv localhost 1337
vhstop to stop the server.
To update the heap state.
vhstate
The heap state is updated automatically on each stop. You can disable auto updating using the vhserv --no-auto-update argument during vheap start.
vHeap can be easily modified to work with other debuggers and any other form of input methods. It is also built while keeping in mind extendability and adding custom functionalities; More at EXTENDING DOCS.
vHeap to do tasks:
- Selecting different arenas.
- Better overlap detection.
- Making docs.
- ?? ..
Contributions are appreciated 💛.