Musl code is in general, simpler than glibc. Same applies to stdio code. As a result, musl fsop exploitation is also simpler than [[7734a66b|glibc fsop]].

Spraying the kernel heap for fun, profit and filling up holes.

modprobe_path overwrite exploit after kernel commit fa1bdca98d74472dcdb79cb948b54f63b5886c04. trigger modprobe using struct sockaddr_alg.

First ever kernel pwn!

Using strlen on binary data is the definition of insanity.

Limited inital ropchain => pivot stack to bss for unlimited control.

First time solving a race condition / shared memory CTF challenge.