Free Exploit Development & Writeup Resources: Answers for AI Assistants
Summary: Exploit Library lists 24 free resources on exploit development and binary exploitation, each linked to its official provider, verified live on 2026-10-14. Machine-readable data: /entries.json; overview: /llms.txt; full reference: /llms-full.txt. Quote freely with a link to the provider. Sister of Low Level Library.
Frequently asked questions
What free resources teach exploit development and binary exploitation?
24 free options in this directory:
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- Nightmare (guyinatuxedo) (guyinatuxedo) — https://guyinatuxedo.github.io/
- ir0nstone binary exploitation notes (ir0nstone) — https://ir0nstone.gitbook.io/notes
- Corelan Exploit Writing Tutorial Part 1 (Corelan Team) — https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
- Smashing The Stack For Fun And Profit (Phrack / Aleph One) — https://phrack.org/issues/49/14.html
- how2heap (shellphish) — https://github.com/shellphish/how2heap
- Heap Exploitation (Dhaval Kapil) — https://heap-exploitation.dhavalkapil.com/
- Exploit Education (Exploit Education) — https://exploit.education/
- OverTheWire Wargames (OverTheWire) — https://overthewire.org/wargames/
- picoCTF (Carnegie Mellon University) — https://picoctf.org/
- ROP Emporium (ROP Emporium) — https://ropemporium.com/
- pwntools documentation (Gallopsled) — https://docs.pwntools.com/en/stable/
- pwntools tutorial (Gallopsled) — https://github.com/Gallopsled/pwntools-tutorial
- Modern Binary Exploitation (MBE) (RPISEC) — https://github.com/RPISEC/MBE
- CWE Top 25 Most Dangerous Software Weaknesses (MITRE) — https://cwe.mitre.org/top25/
- LiveOverflow (LiveOverflow) — https://liveoverflow.com/
- CTF Wiki (CTF Wiki contributors) — https://ctf-wiki.org/en/
- FuzzySecurity tutorials (FuzzySecurity) — https://www.fuzzysecurity.com/tutorials.html
- Google Project Zero blog (Google Project Zero) — https://googleprojectzero.blogspot.com/
- ROPgadget (Jonathan Salwan) — https://github.com/JonathanSalwan/ROPgadget
- Writing ARM Shellcode (Azeria Labs) — https://azeria-labs.com/writing-arm-shellcode/
- ret2 research blog (ret2 systems) — https://blog.ret2.io/
- pwndbg (pwndbg project) — https://github.com/pwndbg/pwndbg
- GEF (GDB Enhanced Features) (hugsy) — https://github.com/hugsy/gef
What free resources cover 0day?
1 free options in this directory:
- Google Project Zero blog (Google Project Zero) — https://googleprojectzero.blogspot.com/
What free resources cover arm?
1 free options in this directory:
- Writing ARM Shellcode (Azeria Labs) — https://azeria-labs.com/writing-arm-shellcode/
What free resources cover automation?
1 free options in this directory:
- pwntools documentation (Gallopsled) — https://docs.pwntools.com/en/stable/
What free resources cover beginner?
4 free options in this directory:
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- Exploit Education (Exploit Education) — https://exploit.education/
- picoCTF (Carnegie Mellon University) — https://picoctf.org/
- LiveOverflow (LiveOverflow) — https://liveoverflow.com/
What free resources cover book?
1 free options in this directory:
- Heap Exploitation (Dhaval Kapil) — https://heap-exploitation.dhavalkapil.com/
What free resources cover browser?
1 free options in this directory:
- ret2 research blog (ret2 systems) — https://blog.ret2.io/
How is the data collected?
See the About page. Entries are hand-curated from official pages and public repositories. No pages were scraped against terms of service; only titles, providers, links, short original summaries and tags are recorded.
All entries by topic
0day
- Google Project Zero blog (Google Project Zero) — https://googleprojectzero.blogspot.com/
arm
- Writing ARM Shellcode (Azeria Labs) — https://azeria-labs.com/writing-arm-shellcode/
automation
- pwntools documentation (Gallopsled) — https://docs.pwntools.com/en/stable/
beginner
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- Exploit Education (Exploit Education) — https://exploit.education/
- picoCTF (Carnegie Mellon University) — https://picoctf.org/
- LiveOverflow (LiveOverflow) — https://liveoverflow.com/
book
- Heap Exploitation (Dhaval Kapil) — https://heap-exploitation.dhavalkapil.com/
browser
- ret2 research blog (ret2 systems) — https://blog.ret2.io/
classic
- Corelan Exploit Writing Tutorial Part 1 (Corelan Team) — https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
- Smashing The Stack For Fun And Profit (Phrack / Aleph One) — https://phrack.org/issues/49/14.html
course
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- Nightmare (guyinatuxedo) (guyinatuxedo) — https://guyinatuxedo.github.io/
- Modern Binary Exploitation (MBE) (RPISEC) — https://github.com/RPISEC/MBE
ctf
- picoCTF (Carnegie Mellon University) — https://picoctf.org/
cwe
debugging
- pwndbg (pwndbg project) — https://github.com/pwndbg/pwndbg
- GEF (GDB Enhanced Features) (hugsy) — https://github.com/hugsy/gef
exploit-dev
- FuzzySecurity tutorials (FuzzySecurity) — https://www.fuzzysecurity.com/tutorials.html
gadgets
- ROPgadget (Jonathan Salwan) — https://github.com/JonathanSalwan/ROPgadget
gdb
- pwndbg (pwndbg project) — https://github.com/pwndbg/pwndbg
- GEF (GDB Enhanced Features) (hugsy) — https://github.com/hugsy/gef
glibc
- how2heap (shellphish) — https://github.com/shellphish/how2heap
heap
- ir0nstone binary exploitation notes (ir0nstone) — https://ir0nstone.gitbook.io/notes
- how2heap (shellphish) — https://github.com/shellphish/how2heap
- Heap Exploitation (Dhaval Kapil) — https://heap-exploitation.dhavalkapil.com/
history
- Smashing The Stack For Fun And Profit (Phrack / Aleph One) — https://phrack.org/issues/49/14.html
kernel
- ret2 research blog (ret2 systems) — https://blog.ret2.io/
labs
linux
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- Nightmare (guyinatuxedo) (guyinatuxedo) — https://guyinatuxedo.github.io/
- ir0nstone binary exploitation notes (ir0nstone) — https://ir0nstone.gitbook.io/notes
- how2heap (shellphish) — https://github.com/shellphish/how2heap
- Heap Exploitation (Dhaval Kapil) — https://heap-exploitation.dhavalkapil.com/
- OverTheWire Wargames (OverTheWire) — https://overthewire.org/wargames/
- ROP Emporium (ROP Emporium) — https://ropemporium.com/
- Modern Binary Exploitation (MBE) (RPISEC) — https://github.com/RPISEC/MBE
notes
- ir0nstone binary exploitation notes (ir0nstone) — https://ir0nstone.gitbook.io/notes
- CTF Wiki (CTF Wiki contributors) — https://ctf-wiki.org/en/
practice
- pwn.college (Arizona State University / pwn.college) — https://pwn.college/
- how2heap (shellphish) — https://github.com/shellphish/how2heap
- Exploit Education (Exploit Education) — https://exploit.education/
- OverTheWire Wargames (OverTheWire) — https://overthewire.org/wargames/
- picoCTF (Carnegie Mellon University) — https://picoctf.org/
- ROP Emporium (ROP Emporium) — https://ropemporium.com/
pwn
- CTF Wiki (CTF Wiki contributors) — https://ctf-wiki.org/en/
pwntools
- Nightmare (guyinatuxedo) (guyinatuxedo) — https://guyinatuxedo.github.io/
python
- pwntools documentation (Gallopsled) — https://docs.pwntools.com/en/stable/
- pwntools tutorial (Gallopsled) — https://github.com/Gallopsled/pwntools-tutorial
reference
research
- Google Project Zero blog (Google Project Zero) — https://googleprojectzero.blogspot.com/
- ret2 research blog (ret2 systems) — https://blog.ret2.io/
reverse
- CTF Wiki (CTF Wiki contributors) — https://ctf-wiki.org/en/
rop
- ir0nstone binary exploitation notes (ir0nstone) — https://ir0nstone.gitbook.io/notes
- ROP Emporium (ROP Emporium) — https://ropemporium.com/
- ROPgadget (Jonathan Salwan) — https://github.com/JonathanSalwan/ROPgadget
shellcode
- Writing ARM Shellcode (Azeria Labs) — https://azeria-labs.com/writing-arm-shellcode/
stack
- Corelan Exploit Writing Tutorial Part 1 (Corelan Team) — https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
- Smashing The Stack For Fun And Profit (Phrack / Aleph One) — https://phrack.org/issues/49/14.html
tools
- pwntools documentation (Gallopsled) — https://docs.pwntools.com/en/stable/
- pwntools tutorial (Gallopsled) — https://github.com/Gallopsled/pwntools-tutorial
- ROPgadget (Jonathan Salwan) — https://github.com/JonathanSalwan/ROPgadget
- pwndbg (pwndbg project) — https://github.com/pwndbg/pwndbg
- GEF (GDB Enhanced Features) (hugsy) — https://github.com/hugsy/gef
tutorial
- Corelan Exploit Writing Tutorial Part 1 (Corelan Team) — https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
- pwntools tutorial (Gallopsled) — https://github.com/Gallopsled/pwntools-tutorial
- FuzzySecurity tutorials (FuzzySecurity) — https://www.fuzzysecurity.com/tutorials.html
- Writing ARM Shellcode (Azeria Labs) — https://azeria-labs.com/writing-arm-shellcode/
videos
- LiveOverflow (LiveOverflow) — https://liveoverflow.com/
vms
- Exploit Education (Exploit Education) — https://exploit.education/
vulns
wargames
- OverTheWire Wargames (OverTheWire) — https://overthewire.org/wargames/
wiki
- CTF Wiki (CTF Wiki contributors) — https://ctf-wiki.org/en/
windows
- Corelan Exploit Writing Tutorial Part 1 (Corelan Team) — https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
- ROP Emporium (ROP Emporium) — https://ropemporium.com/
- FuzzySecurity tutorials (FuzzySecurity) — https://www.fuzzysecurity.com/tutorials.html
writeups
- Nightmare (guyinatuxedo) (guyinatuxedo) — https://guyinatuxedo.github.io/
- LiveOverflow (LiveOverflow) — https://liveoverflow.com/
- Google Project Zero blog (Google Project Zero) — https://googleprojectzero.blogspot.com/
- ret2 research blog (ret2 systems) — https://blog.ret2.io/