Free resource for anyone learning heap exploitation. Credit to @shellphish for maintaining how2heap, a practical collection of glibc heap exploitation techniques with small working PoCs across different libc versions. Fastbin, tcache, unlink, overlapping chunks, House techniques and more. github.com/shellphish/how2he… #ExploitDevelopment #VulnerabilityResearch #ReverseEngineering

If you're into malware analysis, reverse engineering or threat intelligence, bookmark this. @embee_research has built an incredible FREE archive of practical security research covering: • Ghidra + x64dbg • Malware unpacking + shellcode • Cobalt Strike analysis • API hashing + string decryption • PE-bear + Dumpulator • .NET malware + dnSpy • CyberChef + Python deobfuscation • YARA + Sigma • Qakbot, IcedID, AgentTesla, DarkGate + more • Passive DNS + infrastructure hunting • Censys / FOFA pivots • APT infrastructure tracking • URL hunting • Module stomping + API hash evasion A lot of this is hands-on research using real malware samples, not just theory. Also includes deep dives into campaigns like SideWinder and Gamaredon infrastructure hunting. Main site: embeeresearch.io/ Full archive: embeeresearch.io/index/ Huge credit to fellow Australian @embee_research / Matthew for making this research publicly available. #MalwareAnalysis #ReverseEngineering #ThreatIntel

If you're learning exploit development, bookmark this. A FREE collection of hands-on exploit development tutorials covering: Linux + Windows buffer overflows ROP + defeating DEP ASLR + Windows mitigations Heap overflows Format string vulnerabilities Race conditions SEH exploitation x64 assembly ARM shellcode iPhone exploitation Created by @sambowne with @djhardb, @KaitlynGuru and @infosecirvin. Start here: samsclass.info/127/ED_2020.s… Excellent free resource for anyone getting into exploit development, binary exploitation and reverse engineering. #ExploitDevelopment #ReverseEngineering #Infosec

If you're into malware analysis or reverse engineering, bookmark this. @hasherezade has built an incredible collection of FREE research, tools, articles and talks covering: - Malware reverse engineering - PE internals + analysis - PE-bear - PE-sieve + HollowsHunter - Process injection + hollowing - Malware unpacking - Ransomware analysis - Custom malware formats - Rhadamanthys - Petya / NotPetya - Shellcode + in-memory implants - V8 JavaScript bytecode deobfuscation Her research archive goes back more than a decade, with everything from classic Windows malware analysis to Black Hat USA 2026 research. Projects: hasherezade.github.io/ Articles: hasherezade.github.io/articl… Talks + slides: speakerdeck.com/hshrzd Huge credit to @hasherezade for publishing so much of this work and tooling openly. Absolute rabbit hole for malware analysts, reverse engineers and threat researchers. #MalwareAnalysis #ReverseEngineering #Infosec

From your first buffer overflow to kernel exploitation. Free. pwn.college takes you from basic Linux commands all the way through reverse engineering, shellcoding, ROP chains, heap exploitation, format strings, race conditions, and kernel module exploitation. All hands-on. All in a browser-based workspace. Reverse engineering with IDA, Ghidra, Binary Ninja, and angr. User-mode exploitation through every modern mitigation bypass. Kernel exploitation covering stack overflows, heap corruption, and race conditions in kernel modules. One of the places I spent a long time on and still do. If you are serious about exploit development and vulnerability research, this is where you sharpen the fundamentals. YouTube lectures, live Twitch streams, and a Discord community to get unstuck. Free. No paywall. No signup wall. Pwn: pwn.college/ YouTube: youtube.com/pwncollege Created by @Zardus (Yan Shoshitaishvili), kanak (Connor Nelson), mahaloz (Zion Basque), Erik Trickel, Adam Doupé, Pascal-0x90, and frqmod at Arizona State University. #ExploitDevelopment #ReverseEngineering #InfoSec

If you work with Windows internals, reverse engineering or exploit development, bookmark this. @j00ru 's blog is one of the best FREE archives of low-level Windows security research online. It covers: Windows kernel internals Kernel exploitation Reverse engineering Memory corruption + infoleaks Win32k internals NT + Win32k syscall tables CSRSS APIs + internals Fuzzing + instrumentation Windows mitigations Conference talks Technical papers + research Exploit development Some of this research goes back more than 15 years and is still incredibly useful for understanding how Windows works under the hood. The site also maintains dedicated Windows syscall tables and CSRSS reference material. Absolute rabbit hole for anyone serious about Windows security. j00ru.vexillium.org/ #WindowsInternals #ReverseEngineering #ExploitDevelopment