house of waterPEwine随机数预测modprobe_path 劫持PTE sprayslub空闲链表投毒本地提权dirty pipe内核类型混淆解释器micropython自制编程语言编译器mipsoverlaplargebin attack越界修改PHP PwnLFIRCENginx Off-By-Slash竞态条件House of Apple 2FSOP修改got表堆溢出ret2dlresolvecopoff by one部分覆盖爆破Tcache 投毒vmHouse of BotcakeUAF越界泄露盲打整数漏洞逻辑漏洞绕过检查ret2syscall函数指针劫持ret2csu栈空间利用fd重定向srop栈迁移ret2libcjop格式化字符串orwshellcodemprotect