<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Heap Exploitation on </title>
    <link>https://n9o.xyz/tags/heap-exploitation/</link>
    <description>Recent content in Heap Exploitation on </description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language>
    <copyright>© 2026 Vaishnav Baraskar</copyright>
    <lastBuildDate>Mon, 12 May 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://n9o.xyz/tags/heap-exploitation/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title>Haunting the Heap: Use-After-Free in AuthenKey Login Handler (x64)</title>
      <link>https://n9o.xyz/reverseengineering/authenkey/</link>
      <pubDate>Mon, 12 May 2025 00:00:00 +0000</pubDate>
      
      <guid>https://n9o.xyz/reverseengineering/authenkey/</guid>
      <description>&lt;h1 class=&#34;relative group&#34;&gt;&lt;strong&gt;Prologue — Heap Echoes in an AuthenKey Login Night&lt;/strong&gt; 
    &lt;div id=&#34;prologue--heap-echoes-in-an-authenkey-login-night&#34; class=&#34;anchor&#34;&gt;&lt;/div&gt;
    
    &lt;span
        class=&#34;absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100&#34;&gt;
        &lt;a class=&#34;group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline&#34; href=&#34;#prologue--heap-echoes-in-an-authenkey-login-night&#34; aria-label=&#34;Anchor&#34;&gt;#&lt;/a&gt;
    &lt;/span&gt;        
    
&lt;/h1&gt;
&lt;p&gt;It was one of those times when I wasn’t actively hunting—just casually skimming through binaries like I was flipping through a security archive. The target: &lt;strong&gt;AuthenKey&lt;/strong&gt;, a multi-factor login handler used by corporate VPN portals. As I browsed its binary, I found a small routine involved in processing post-login session keys.&lt;/p&gt;</description>
      <media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://n9o.xyz/reverseengineering/authenkey/feature.jpeg" />
    </item>
    
  </channel>
</rss>
