501(c)3 Nonprofit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021! [email protected]
Internets!
Joined November 2011
- Tweets884
- Following17
- Followers10K
- Likes353
OpenSecurityTraining2 retweeted
I took the assembly and OS internals class and they both were amazing
OpenSecurityTraining2 retweeted
If you're into Windows internals, reverse engineering or exploit development, bookmark this.
The @OpenSecTraining has an incredible collection of FREE low-level security courses covering:
- x86-64 assembly
- Windows kernel internals
- Windows kernel exploitation
- WinDbg from introductory to advanced
- IDA + Ghidra + Binary Ninja
- HyperDbg
- UEFI internals
- Intel firmware attack + defense
- C/C++ vulnerability research
- Symbolic analysis
- C++ binary reversing
- AFL++ fuzzing
- TPM + trusted computing
- Intel SPI analysis
- OS internals
- RISC-V
- Emulator development with QEMU
There is even a dedicated Windows kernel exploitation course covering race conditions + UAFs in KTM.
Proper low-level material, not another surface-level security course.
Start digging:
p.ost2.fyi/
#WindowsInternals #ReverseEngineering #ExploitDevelopment
OpenSecurityTraining2 retweeted
This is “Li’l Stranger”, the new mascot for @OpenSecTraining.
- “I’m Xeno and I approve of this message!”
OpenSecurityTraining2 retweeted
Now it's time for us to make good on our promise to making learning more fun on the site, and to start highlighting all the accomplishments students have achieved and can yet achieve!
OpenSecurityTraining2 retweeted
Immense thanks to everyone who stepped forward to support #OST2! ❤️ Your generous donations help show that you value providing free high-quality educational material to the world.
OpenSecurityTraining2 retweeted
Dino’s been mentioning the importance of hardware in security architectural design a bit more lately. As a reminder if you want to get on this architect level, #OST2 has 3 classes on learning to use TPMs:
ost2.fyi/TC1101
ost2.fyi/TC1102
ost2.fyi/TC1103
OpenSecurityTraining2 retweeted
Thanks to all the donors who put us over $1500 in donations so far for our first ever fundraiser!
But we know there are thousands of other students & well-wishers waiting in the wings. If folks donated just $5 today we'd quickly double that total!
every.org/ost2/f/lets-gamify…
🎮This is the last week of the OST2 gamification fundraiser! If you were waiting to be a last-minute hero, now is the time to swoop in!🕹️
every.org/ost2/f/lets-gamify…
In this final video @XenoKovah talks about how the gamification system will allow us to recognize other worthwhile achievements outside of the platform, such as speaking at security conferences!
And not only will you get to show off your accomplishments, but by supporting our build-out for gamification, you'll also be helping OST2 support itself, by opening up a new type of sponsorship of OST2 by security conferences themselves!
OpenSecurityTraining2 retweeted
I’ve been looking for a way to recognize #OST2 volunteers more publicly, and this will allow them to stand head and shoulders above other OST2 students and claim their rightful place of honor! Only the instructors and potentially hardcore class-completionists will shine brighter!
🎮Our gamification fundraiser ends soon and we need your support!🕹️
every.org/ost2/f/lets-gamify…
In this video @XenoKovah talks about how the gamification will allow us to recognize the volunteers who make classes better through beta testing, subtitle correction, graphics contributions, etc!
It's the 11th hour and we really want to know how many people support what we do, so even small donations help us by showing who are our true friends & fans!🙏
OpenSecurityTraining2 retweeted
I think inter/intra-country leaderboards will drive some fun inter/intra-country competition. E.g. here’s who’s been active on OST2 in the last 30 minutes (it’s currently too-early-to-be-up-o’clock on a holiday in the US ;)). But which country has the TOP students?!
🎮In the 5th video in our gamification fundraiser, @XenoKovah talks about how leaderboards will work!🕹️
We will have a bunch of different leaderboards: global for the entire site, per-country, per-class, per-accomplishment, and possibly more!
If you'd like to see this happen (or if you just think OST2 is awesome!), please support us at every.org/ost2/f/lets-gamify… 🙏
(And if you have already finished lots of classes on OST2 you might see yourself on the leaderboards in the video ;))
OpenSecurityTraining2 retweeted
🥳#OST2_5th_Anniversary🎉
Check out #OST2_5th_Anniversary to join our celebration and see what happened this past year!
OpenSecurityTraining2 retweeted
After taking this class and understanding more about how QEMU works, I'm looking forward to throwing LLMs at the often painstaking work necessary for re-hosting firmware to run in an emulator like QEMU.
📣"Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" released!📣
ost2.fyi/Arch1901
This class by Antonio Nappa @jeppojeps of Fuzz Society @fuzzsociety_org builds up your knowledge from learning a toy 8-bit CPU architecture all the way to understanding how QEMU can emulate that architecture. Using this knowledge you can then understand how QEMU can emulate any architecture!
OpenSecurityTraining2 retweeted
Our free course on @OpenSecTraining has officially launched today after 2 betas.
From Zero to QEMU will drive you from writing a basic 8bit interpreter (python) to understand how to instrument QEMU - we are hosting, in-browser-lab to start immediately - also docker avaliable.
Thanks to all the beta testers, @XenoKovah Hudson, Crandyman, Lizard for their invaluable and deep help.
Direct Link Below.
OpenSecurityTraining2 retweeted
Upgraded server news 7:
This is actually the biggest one, and what prompted us to upgrade. The new server is ready for adding gamification support! We're going to be running a fundraiser soon to test the community's support for OST2 and share how gamification could work on OST2. If you want to get a head start you can contribute here (cryptocurrency is now accepted too!) every.org/ost2/f/lets-gamify…
OpenSecurityTraining2 retweeted
Upgraded server news 6:
Another longstanding Open edX bug that we've fixed is the fact that there was no way for instructors to get emails when students posted to forums. None of the instructors have time to be checking the forums every day. But now instructors can opt in to getting emails and deciding if they want to reply. (Reminder: in this day and age, the best bet is to try an LLM first with your questions. But for sure keep posting when things are broken in a class, so they can get fixed.)
OpenSecurityTraining2 retweeted
Upgraded server news 5:
No more missed emails thanks to improved rate limiting. Open edX has a forever-bug where it doesn't slow down email sending when it hits the rate limit. We've fixed this so now we can ensure all students get instructor emails.
OpenSecurityTraining2 retweeted
Upgraded server news 4:
Light/dark mode theme switcher in top right corner.
OpenSecurityTraining2 retweeted
Upgraded server news 3:
New password complexity requirements - 18 characters, no complexity requirements, since 26^18 >> 62^8 (hopefully we don't need to educate you on password best practices ;)). This doesn't apply retroactively, just to new registrations or password resets.
OpenSecurityTraining2 retweeted
Upgraded server news 2:
Our new support for OAuth also lets us serve as a SSO server for other platforms. Antonio Nappa @jeppojeps has enabled it to allow SSO for OST2 students into fuzzsociety.org @fuzzsociety_org for the current "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" class that's currently in beta testing.
