pwn.college
Arizona State University / pwn.college · Beginner · Interactive dojo + videos
Structured free dojo covering binary exploitation from first principles with graded modules.
coursepracticelinuxbeginnerFree Exploit Development & Writeup Resources
24 free resources on exploit development and binary exploitation, hand-curated and link-checked on 2026-10-14. Part of Low Level Library. A curated directory of free tutorials, wargames and writeups on binary exploitation and related techniques.
Nightmare (guyinatuxedo)
guyinatuxedo · Intermediate · Online course + writeups
Modern binary exploitation course built around pwntools, with many challenge writeups.
coursewriteupspwntoolslinuxir0nstone binary exploitation notes
ir0nstone · Intermediate · GitBook notes
Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives.
notesropheaplinuxCorelan Exploit Writing Tutorial Part 1
Corelan Team · Beginner · Tutorial series
Classic step-by-step introduction to stack-based buffer overflows on Windows.
windowsstacktutorialclassicSmashing The Stack For Fun And Profit
Phrack / Aleph One · Intermediate · Article
The foundational Phrack article that introduced stack-smashing techniques to a wide audience.
classicstackhistoryhow2heap
shellphish · Advanced · Demo suite (GitHub)
Small C demos of glibc heap techniques, kept updated as allocator internals change.
heapglibcpracticelinuxHeap Exploitation
Dhaval Kapil · Advanced · Online book
Free book explaining heap allocators and common heap exploitation patterns on Linux.
heapbooklinuxExploit Education
Exploit Education · Beginner · VM challenges
Downloadable VMs (Phoenix, Nebula and others) for learning memory corruption safely.
practicevmsbeginnerOverTheWire Wargames
OverTheWire · Beginner · Online wargames
Long-running free wargames (Bandit, Narnia, Behemoth and more) for stepwise practice.
practicewargameslinuxpicoCTF
Carnegie Mellon University · Beginner · CTF platform
Free CTF platform aimed at students, with many binary and exploitation challenges.
practicectfbeginnerROP Emporium
ROP Emporium · Intermediate · Challenge set
Focused ROP challenges on Linux and Windows that build gadget chaining skills.
roppracticelinuxwindowspwntools documentation
Gallopsled · Intermediate · Library docs
Docs for pwntools, the standard Python toolkit for writing exploit scripts and CTF solvers.
toolspythonautomationpwntools tutorial
Gallopsled · Beginner · Tutorial (GitHub)
Guided tutorials for tubes, ELF helpers, ROP and shellcraft in pwntools.
toolstutorialpythonModern Binary Exploitation (MBE)
RPISEC · Intermediate · Course materials (GitHub)
RPISEC course materials and labs covering modern binary exploitation techniques.
courselabslinuxCWE Top 25 Most Dangerous Software Weaknesses
MITRE · Reference · Annual ranking
Annual list of the most dangerous software weaknesses — useful map of exploit classes.
referencecwevulnsLiveOverflow
LiveOverflow · Beginner · Video + blog
Approachable video explanations of binary exploitation, CTF tricks and systems topics.
videoswriteupsbeginnerCTF Wiki
CTF Wiki contributors · Intermediate · Community wiki
Community-maintained wiki covering pwn, reverse, crypto and other CTF topics.
wikinotespwnreverseFuzzySecurity tutorials
FuzzySecurity · Intermediate · Tutorial index
Windows-focused exploit development tutorials spanning stack, SEH and kernel topics.
windowstutorialexploit-devGoogle Project Zero blog
Google Project Zero · Advanced · Research blog
In-depth vulnerability research writeups from Google's Project Zero team.
researchwriteups0dayROPgadget
Jonathan Salwan · Intermediate · Open-source tool (GitHub)
Finds ROP gadgets in binaries across many architectures.
toolsropgadgetsWriting ARM Shellcode
Azeria Labs · Intermediate · Tutorial
Practical guide to writing and debugging ARM shellcode.
armshellcodetutorialret2 research blog
ret2 systems · Advanced · Research blog
High-quality writeups on browser, kernel and advanced exploitation research.
researchwriteupsbrowserkernelpwndbg
pwndbg project · Intermediate · Open-source tool (GitHub)
GDB plugin that surfaces heap, registers and context useful while developing exploits.
toolsgdbdebuggingGEF (GDB Enhanced Features)
hugsy · Intermediate · Open-source tool (GitHub)
Another popular GDB enhancement focused on exploit development workflows.
toolsgdbdebuggingStay in the loop
Occasional notes when we add free exploit development and binary exploitation resources. No spam. Unsubscribe any time.
Powered by Resend. We never sell addresses.