Free resource for anyone learning heap exploitation. Credit to @shellphish for maintaining how2heap, a practical collection of glibc heap exploitation techniques with small working PoCs across different libc versions. Fastbin, tcache, unlink, overlapping chunks, House techniques and more. github.com/shellphish/how2he… #ExploitDevelopment #VulnerabilityResearch #ReverseEngineering

If you're into malware analysis, reverse engineering or threat intelligence, bookmark this. @embee_research has built an incredible FREE archive of practical security research covering: • Ghidra + x64dbg • Malware unpacking + shellcode • Cobalt Strike analysis • API hashing + string decryption • PE-bear + Dumpulator • .NET malware + dnSpy • CyberChef + Python deobfuscation • YARA + Sigma • Qakbot, IcedID, AgentTesla, DarkGate + more • Passive DNS + infrastructure hunting • Censys / FOFA pivots • APT infrastructure tracking • URL hunting • Module stomping + API hash evasion A lot of this is hands-on research using real malware samples, not just theory. Also includes deep dives into campaigns like SideWinder and Gamaredon infrastructure hunting. Main site: embeeresearch.io/ Full archive: embeeresearch.io/index/ Huge credit to fellow Australian @embee_research / Matthew for making this research publicly available. #MalwareAnalysis #ReverseEngineering #ThreatIntel

If you're learning exploit development, bookmark this. A FREE collection of hands-on exploit development tutorials covering: Linux + Windows buffer overflows ROP + defeating DEP ASLR + Windows mitigations Heap overflows Format string vulnerabilities Race conditions SEH exploitation x64 assembly ARM shellcode iPhone exploitation Created by @sambowne with @djhardb, @KaitlynGuru and @infosecirvin. Start here: samsclass.info/127/ED_2020.s… Excellent free resource for anyone getting into exploit development, binary exploitation and reverse engineering. #ExploitDevelopment #ReverseEngineering #Infosec