> For the complete documentation index, see [llms.txt](https://www.ctfrecipes.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.ctfrecipes.com/pwn/heap-exploitation.md).

# Heap exploitation

- [Heap overflow](https://www.ctfrecipes.com/pwn/heap-exploitation/heap-overflow.md)
- [Challenge example](https://www.ctfrecipes.com/pwn/heap-exploitation/heap-overflow/challenge-example.md)
- [Use after free](https://www.ctfrecipes.com/pwn/heap-exploitation/use-after-free.md)
- [Challenge example](https://www.ctfrecipes.com/pwn/heap-exploitation/use-after-free/challenge-example.md)
- [Double free](https://www.ctfrecipes.com/pwn/heap-exploitation/double-free.md): Arbitrary write
- [Unlink exploit](https://www.ctfrecipes.com/pwn/heap-exploitation/unlink-exploit.md)