Marco IvaldiJul 10

As an old fart in #xdev, I get asked often, mostly by young coworkers, how to get into binary exploitation in 2025. I looked around, and here’s my recommendation:

https://pwn.college

#pwncollege is a huge collection of free #lectures and practical #challenges maintained by a team of #hackers at the Arizona State University. Check it out!

Show threadMarco IvaldiJul 10

As a side note, since somebody asked… 20 years ago I would’ve (and I have in multiple occasions) recommended the legendary #abo series by gera https://web.archive.org/web/20150418052653/http://community.coresecurity.com/~gera/InsecureProgramming/

#xdev #pwncollege #lectures #challenges #hackers

gera's InsecureProgramming page

Show threadregnilJul 10
@raptor another one i've recommended over the years is microcorruption.com
Show threadMarco IvaldiJul 10
@regnil nice! Thanks
Show threadfloyd aka floyd_chJul 10
@raptor @regnil btw. if somebody prefers a though, paid, trainer-lead course during a few days instead of free courses online, I can really recommend corelan.be bootcamp (everything on Windows except heap), this is brilliant. Also the advanced corelan course (Windows heap stuff, though some weird people were expecting to learn more than a few mem allocators/IE versions on 2 OS versions, but I liked the practical iterative approach on how to approach a target)
Show threadMarco Ivaldi
@floyd @regnil I only completed their free course many years ago and it really helped me to prepare for OSCE although I’m not really a Windows guy 👍
Jul 11 at 6:30amWeb