Tags: heap fastbin tcache oob 

Rating: 5.0

use an OOB free to create overlapping chunks and manipulate Fastbin FD to get arbritrary write on libc 2.30

Original writeup (https://fascinating-confusion.io/posts/2019/10/tcalc-writeup/).