Tampering with the top chunk size field for an arbitrary write primitive.
Exploiting heap thread caching on glibc 2.26.
Double free exploitation of glibc heap fastbins.
Bypassing NX on 64-bit Linux.
Bypassing NX & ASLR using pointer leakage and ROP.