ASLR, PIE Bias, and a Lab Pointer Leak
/proc/self/maps across runs, gdb measurement of PIE load bias, a toy %p leak of a text pointer. Entropy is what remains after the leak — no exploit chain.
Binary Analysis
Format String Lab: Leak, Crash, and the %s Patch
Toy printf(user) lab: gdb dump of stack words matching a %p leak (canary included conceptually), SIGSEGV from %s, ASan on a sprintf companion, patched printf("%s", user).