PwnLand

Overview

PwnLand is an open-source repository maintained by PwnFuzz, an R&D lab specializing in fuzzing, reverse engineering, vulnerability research, and exploit development. This repository serves as a comprehensive resource for security researchers, CTF players, and anyone interested in binary exploitation.

PwnLand contains practical examples, tutorials, CTF writeups, and research materials covering various aspects of binary exploitation, including:

• Buffer Overflows and ROP Chains
• Format String Vulnerabilities
• Heap Exploitation Techniques
• Kernel Exploitation
• Assembly Language Fundamentals
• Binary Debugging Strategies

Whether you're a beginner or an experienced security researcher, PwnLand provides hands-on materials to enhance your understanding of exploitation techniques across different environments and security mechanisms.

Table of Contents

• Directory Structure
• Exploitation Techniques
  • Buffer Overflows
  • Format String
  • Heap Exploitation
  • Kernel Exploitation
    • Kernel Exploitation Primer Series
• CTF Writeups
• Research Materials
• Assembly Resources
• Debugging Guides
• Challenges
• Getting Started
• Contributing
• License

Directory Structure

.
├── Assembly/              # Assembly language fundamentals
├── Attachments/           # Supporting images and resources
├── binaries/              # Example binaries for practice
├── BufferOverflows/       # Buffer overflow techniques and examples
├── Challenges/            # Practice challenges
├── CTFs/                  # Writeups and solutions for CTF challenges
├── Debugging/             # Debugging techniques and guides
├── Format String/         # Format string vulnerability tutorials
├── Heap/                  # Heap exploitation techniques
├── Kernel/                # Kernel exploitation examples
└── Research/              # Deep dives into exploitation concepts

Exploitation Techniques

Buffer Overflows

Navigate to BufferOverflows/ to explore:

• Basic Overflow Techniques

  • Basic Buffer Overflow
  • File Pointer Overwrite
  • gets() Vulnerability

• Return-to-libc Attacks

  • 32-bit Return-to-libc without ASLR
  • 32-bit Return-to-libc with ASLR

• Return-Oriented Programming (ROP)

  • 32-bit Basic ROP
  • 64-bit Basic ROP

• Additional Resources

  • Resources and References

Format String

Navigate to Format String/ to learn about:

• Introduction to Format String Vulnerabilities
• GOT Overwrite to System
• Writing Shellcode to BSS
• Variable Value Overwrite

Heap Exploitation

Navigate to Heap/ for techniques organized by GLIBC version:

• GLIBC 2.23

  • Fastbin Dup
  • House of Force
  • Use After Free (UAF)
  • Unsafe Unlink

• GLIBC 2.27

  • Double Free
  • Nullbyte Overflow
  • Overlapping Chunks

Kernel Exploitation

Navigate to Kernel/ to explore:

• HEVD Buffer Overflow
• OTAu-lab10c Challenge

Kernel Exploitation Primer Series

This section was contributed by Nikhil. The following blog posts are beginner-friendly and offer in-depth guidance for those starting out with Windows kernel exploitation on modern systems.

• Kernel Exploitation Primer 0x0 - Windows Driver 101
• Kernel Exploitation Primer 0x1 - Setup & Reversing
• Kernel Exploitation Primer 0x2 - SMEP & kASLR & VBS
• Kernel Exploitation Primer 0x3 - VBS & HVCI
• Kernel Exploitation Primer 0x4 - Type Confusion & Use-After-Free Vulnerabilities
• Kernel Exploitation Primer 0x5 - Arbitrary Write (Write-What-Where)

CTF Writeups

Explore solutions from various CTF competitions:

• DownUnderCTF 2020
• HacktivityCon 2020
• DarkCon 2021
• DiceCTF 2021
• SecurinetsCTF 2021
• CyberApocalypse 2021
• NahamCon 2021
• BlueHens 2021
• 3kCTF 2020
• HTB RopeTwo

Research Materials

Navigate to Research/ for deep dives into:

• malloc() Internals
• free() Internals
• calloc() Internals
• realloc() Internals
• Hook Functions
• Tcache Mechanisms
• Stdout Functions
• Overflow Techniques

Assembly Resources

Navigate to Assembly/ for:

• Chapter 1: Assembly Fundamentals

Debugging Guides

Navigate to Debugging/ for:

• Chapter 1: Debugging Fundamentals

Challenges

Navigate to Challenges/ to test your skills:

• Bit Flip Challenge

Getting Started

To get started with PwnLand:

1. Clone this repository:

   git clone https://github.com/PwnFuzz/PwnLand.git

2. Browse to a topic of interest in the repository.

3. Follow the tutorials and examples to enhance your skills.

4. For binary examples, navigate to the binaries/ directory.

Contributing

Contributions to PwnLand are welcome! Whether you want to fix a typo, add a tutorial, or contribute a CTF writeup, please follow these steps:

1. Fork the repository
2. Create a new branch (git checkout -b feature/your-feature)
3. Commit your changes (git commit -am 'Add new tutorial on XYZ')
4. Push to the branch (git push origin feature/your-feature)
5. Create a new Pull Request

Please ensure your contributions follow the existing structure and include appropriate documentation.

License

This project is licensed under the MIT License - see the LICENSE file for details.

---

© 2025 PwnFuzz - Open Source R&D Lab for Fuzzing, Reverse Engineering, Vulnerability Research & Exploit Development