Howdy! 🤠#

I’m Thea “Teddy” Heinen (she/her or they/them)!

You can find me on GitHub and I’m reachable by email at me@heinen.dev.

I CTF with idek and mostly do binary exploitation.

I like low-level computing in all forms — with a particular focus in security, performance, and program correctness.

In my free time I like to crochet, read, and play with my cat Winter :)

If you aren’t here for anything in particular I’d recommend the following

• this post describing 1-byte .data relative swaps to RCE
• this post using glibc GOT hijacking as a code-reuse attack with a shadow stack
• this post using angr to automatically find and trigger buffer overflows and a partial GOT write to build a leak primitive in a leakless binary

I’ve also written some blog posts elsewhere:

• How we found a bug in Go’s arm64 compiler @ Cloudflare