pwning

This repo contains resources/notes/blogs I've found on the interwebz related to binary exploitation and internals in general. I hope you find them as useful as I did.

Blogs / Write-ups

• The Art of Assembly Language

• CTF Resources

• Linux Reverse Engineering

• RE Resources

• NSA's Reverse Engineering Resources

• FAQ: How to Learn Reverse Engineering

• R4ndom’s Beginning Reverse Engineering Tutorials

• Fuzzing Resources

• The Art of Fuzzing

• SAT/SMT Solvers and Symbolic Execution

• Understanding glibc malloc

• Malloc Internals

• Heap Exploitation

• afl-unicorn: Fuzzing Arbitrary Binary Code

• House of Einherjar

• The magicians cape – 1 Byte Overflow

• Linux Kernel Module Cheat

• Linux Kernel Exploitation

• Kernel Mode Rootkits Explained

• Research Rootkit Project

• Windows Exploit Development

• Windows Kernel Debugging

• Windows Kernel Driver Exploitation

• Windows Exploitation

• ARM ISA Simplified

• ARMv8 Shellcode From A to Z

• Whirlwind Tour of ARM Assembly

• ARM Assembly / Exploitation

• ARM Lab Environment

• IoT ARM Exploitation

• iOS RE

• Reversing and Exploiting ARM Binaries

• Reversing GO Binaries Like a Pro

• Golang Reversing Write-up

• Educational Tools for Binary Ninja

• GEF Tutorial Playlist

• 2017 Flare-on Challenge Solutions

• A Journey into Radare 2

• C++ VTable Pwning

• megabeets

• uafio

• rh0gue

• kileak

• Bruce Chen

• hackndo

• Angelboy

• w0lfzhang

• pwn4fun

• Mutepig

• inaz2

• glem

• rootkits.xyz

• hugsy

• fevral

• codemaxx

• RPISEC

• BinaryStudio

• acez.re

• gbmaster

• XPN

• poning

• wapiflapi

• 4rbit3r

• Game Boy Pwning Write-up

• skullsecurity

• KernelFarm

Papers / Techniques

• FILE Structure Exploitation

• File Stream Pointer Overflow

• ret2dl-resolve

• ROP ret2dl-resolve

• Bypassing Seccomp Rules & FORTIFY_SOURCE

• Abusing Exit Handlers

• https://paper.seebug.org/papers/Archive/refs/2015-1029-yangkun-Gold-Mining-CTF.pdf

• CON Papers

• Textes sur le hacking - OUAH Site

Youtube Channels / CON Playlists

• LiveOverflow

• Gynvael

• Murmus

• Colin Hardy

• Stephen Chapman

• cetfor

• OALabs

• The Ultimate Game Boy Talk

• WinDbg Series

• OJ Reeves

• kileak

• Angry Hacking

• Miasm Reverse Engineering Framework

• Intro to Frida and Dynamic Machine Code Transformations

• Frida: The Engineering Behind the Reverse Engineering

• Reverse Engineering Embedded ARM Devices

• REcon 2017

• r2con 2017

• r2con 2016

Practice

• ctftime

• Modern Binary Exploitation

• pwnable.tw

• Pwn Challenges List

• RE Challenges List

• HITCON Training

• how2heap

• Heap Challenges

• CTF Course

• ROP Emporium

• how2fsb

• how2bof

• how2exploit

• ARM Exploitation Challenges

• iOS CTF

Tools

• gef

• Pwngdb

• pwntools

• kex

• BNinja Plugins

• pwnjs

• preeny

• Unicorn Engine

• IDA EA

• z3 API in Python

• manticore

• Magic with Manticore

• angr

• Klee & Angr

• rVMI

• Witchcraft Compiler Collection

• IDA FLIRT Signature Database

• Libc Database

• Online x86 / x64 Assembler and Disassembler