ckxckx/pwning

RE / Binary Exploitation Resources

pwning

This repo contains resources I've found on the interwebz related to Binary Exploitation and Reverse Engineering. I hope you find them as useful as I did.

Fundamentals

• Reverse Engineering Open Course

• Symbolic Execution: Intuition and Implementation

• Practical Symbolic Execution and SATisfiability Module Theories 101

• Weird machines, exploitability, and provable unexploitability

• Exploit Dev Resources

• About Exploits Writing

• The Art of Assembly Language

• CTF Resources

• Linux Reverse Engineering

• Reverse Engineering Reading List

• RE Resources

• Gynvael - How to Learn Reverse Engineering

• R4ndom’s Beginning Reverse Engineering Tutorials

• Fuzzing Resources

• The Art of Fuzzing

• SAT/SMT Solvers and Symbolic Execution

• afl-unicorn: Fuzzing Arbitrary Binary Code

• Kernel Debugging for Newbies

• Linux Kernel Module Cheat

• Linux Kernel Exploitation

• Kernel Mode Rootkits Explained

• Research Rootkit Project

• Windows Exploit Development

• Windows Kernel Debugging

• Windows Kernel Driver Exploitation

• Windows Exploitation

• ARM ISA Simplified

• ARMv8 Shellcode From A to Z

• Whirlwind Tour of ARM Assembly

• ARM Assembly / Exploitation

• ARM Lab Environment

• Reversing & Exploiting Embedded Devices

• IoT ARM Exploitation

• OSX / iOS Reverse Engineering

• iOS RE

• Reversing and Exploiting ARM Binaries

• Lua RE

• Reversing GO Binaries Like a Pro

• Golang Reversing Write-up

• C++ VTable Pwning

• Game Boy Pwning Write-up

Blogs / Write-ups

• kileak

• uafio

• rh0gue

• ret2systems

• Bruce Chen

• NextLine

• tacxingxing.com

• Sakura

• Angelboy

• Vulnerability Modeling With Binary Ninja

• Detecting LLVM Obfuscator

Talks / Papers / Techniques

• From Heap to RIP

• House of Roman

• Triton & Symbolic Execution on GDB

• Bypassing _IO_vtable_check

• FILE Structure Exploitation

• ret2dl-resolve

• Textes sur le hacking - OUAH Site

Youtube Channels

• LiveOverflow

• Gynvael

• Murmus

• Adam Doupé

• Colin Hardy

• Stephen Chapman

• cetfor

• OALabs

• OJ Reeves

• kileak

Videos

• The Cerberus Memory Object Semantics for ISO and De Facto C

• GEF Tutorial Playlist

• Be a Binary Rockstar

• Angry Hacking

• Implementing an LLVM based Dynamic Binary Instrumentation Framework

• Breaking Modern Binary Obfuscation

• Reverse Engineering & Writing x86 Microcode

• Reverse Engineering FPGAs

• Miasm Reverse Engineering Framework

• Intro to Frida and Dynamic Machine Code Transformations

• Frida: The Engineering Behind the Reverse Engineering

• Reverse Engineering Embedded ARM Devices

• REcon 2017

• The Ultimate Game Boy Talk

• WinDbg Series

Practice

• ctftime

• Modern Binary Exploitation

• pwnable.tw

• crackmes

• Linux Exploitation Course

• GTFOBins

• CNS CTF Course

• CNIT 127: Exploit Development

• Pwn Challenges List

• Reversing Challenges List

• HITCON Training

• how2heap

• Heap Challenges

• CTF Course

• ROP Emporium

• how2fsb

• how2bof

• how2exploit

• Damn Vulnerable ARM Router

• Very Vulnerable ARM Application

• ARM Exploitation Challenges

• iOS CTF

• AFL Training

Tools

• peda

• gef

• Pwngdb

• pwndbg

• pwntools

• Z3py Tutorial

• z3 Playground

• Educational Tools for Binary Ninja

• idaemu

• arm_now

• ARM64JSON

• cgasm

• HeapViewer

• CTF Script Samples

• glibc Index

• PinCTF

• Multiverse

• kex

• Static ARM Binaries

• IDA Plugin List

• BNinja Plugins

• Introduction to the Binary Ninja API

• Binary Ninja AVR Plugin

• pwnjs

• preeny

• rappel

• Witchcraft Compiler Collection

• Using the Witchcraft Compiler Collection to debug ARM

• Unicorn Engine

• Unicorn Engine Tutorial

• usercorn

• IDA EA

• z3 API in Python

• manticore

• Magic with Manticore

• angr

• simavr

• Klee & Angr

• rVMI

• Witchcraft Compiler Collection

• IDA FLIRT Signature Database

• Libc Database

• Online x86 / x64 Assembler and Disassembler