A rather easy challenge based on a Heap Playground with no restrictions on read/write/malloc
Using TCacheDup to get an allocation at malloc_hook we get easy code execution. The gotcha is the new Libc 2.32 which implements Safelinking to protect single linked list. We have to understand this technique and obfuscate our pointers accordingly. [Detailed Writeup](https://fascinating-confusion.io/posts/2020/11/csr20-howtoheap-writeup/)

Original writeup (https://fascinating-confusion.io/posts/2020/11/csr20-howtoheap-writeup/).