Dissecting House of Apple 2 on modern glibc
Summary
The article provides a deep dive into House of Apple 2 on glibc 2.43, detailing how the _IO_FILE_plus vtable and the wide-character vtable path enable a multi-stage exploitation, including a stack pivot and a ROP chain. It explains vtable validation mechanics and outlines the careful payload layout required to achieve an arbitrary call in a lab environment, with references to related tools and exploits.