The article provides an interactive GDB walkthrough dissecting the House of Apple 2 exploitation technique on glibc 2.43 (Ubuntu 26.04 / Fedora 44). It does not introduce a new variant but investigates whether the FSOP-based attack — leveraging valid _IO_FILE_plus vtables to reach wide-character stream dispatch — remains viable on modern glibc. An accompanying sandbox and lab repo are provided for readers to follow along.
Background
House of Apple 2 is a File Stream Oriented Programming (FSOP) technique originally introduced by Roderick, exploiting wide-character stream vtable dispatch in glibc's _IO_FILE_plus structures to achieve arbitrary code execution.
- Source
- Lobsters
- Published
- Sep 27, 2026 at 03:31 AM
- Score
- 6.0 / 10