Heap Metadata Corruption for Arbitrary Allocation | UMASS CTF mitigations are awesome
a heap overflow in a 64-bit ELF (with partial RELRO, Canary, NX, no PIE) lets you corrupt metadata and force malloc to return a chunk containing “Ez W” to trigger flag leakage.