TLDR Tech / InfoSec
House of Apple 2 on modern glibc
This comprehensive walkthrough dissects "House of Apple 2," a glibc FSOP technique designed to bypass the vtable validation in newer glibc versions. The method involves redirecting a FILE structure's vtable to legitimate wide-character stream code, which then dispatches to a second, unchecked vtable. Using GDB, the author meticulously demonstrates how this unchecked indirect call can be converted into an arbitrary call, enabling stack pivoting and the execution of a ROP chain to achieve a shell. The technique remains effective on glibc 2.43 (Ubuntu 26.04 and Fedora 44), with the core control-flow manipulation remaining consistent despite variations in exact offsets and gadgets across different builds.
Read the full story