{
  "name": "Free Exploit Development & Writeup Resources",
  "site": "https://exploit.lowlevellibrary.com",
  "brand": "Exploit Library",
  "parent": "https://lowlevellibrary.com/",
  "updated": "2026-10-14",
  "count": 24,
  "entries": [
    {
      "id": "pwn-college",
      "title": "pwn.college",
      "provider": "Arizona State University / pwn.college",
      "url": "https://pwn.college/",
      "tags": [
        "course",
        "practice",
        "linux",
        "beginner"
      ],
      "level": "Beginner",
      "format": "Interactive dojo + videos",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Structured free dojo covering binary exploitation from first principles with graded modules.",
      "page": "https://exploit.lowlevellibrary.com/entries/pwn-college/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "nightmare",
      "title": "Nightmare (guyinatuxedo)",
      "provider": "guyinatuxedo",
      "url": "https://guyinatuxedo.github.io/",
      "tags": [
        "course",
        "writeups",
        "pwntools",
        "linux"
      ],
      "level": "Intermediate",
      "format": "Online course + writeups",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Modern binary exploitation course built around pwntools, with many challenge writeups.",
      "page": "https://exploit.lowlevellibrary.com/entries/nightmare/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ir0nstone",
      "title": "ir0nstone binary exploitation notes",
      "provider": "ir0nstone",
      "url": "https://ir0nstone.gitbook.io/notes",
      "tags": [
        "notes",
        "rop",
        "heap",
        "linux"
      ],
      "level": "Intermediate",
      "format": "GitBook notes",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitBook",
      "summary": "Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives.",
      "page": "https://exploit.lowlevellibrary.com/entries/ir0nstone/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "corelan-part1",
      "title": "Corelan Exploit Writing Tutorial Part 1",
      "provider": "Corelan Team",
      "url": "https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/",
      "tags": [
        "windows",
        "stack",
        "tutorial",
        "classic"
      ],
      "level": "Beginner",
      "format": "Tutorial series",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official blog",
      "summary": "Classic step-by-step introduction to stack-based buffer overflows on Windows.",
      "page": "https://exploit.lowlevellibrary.com/entries/corelan-part1/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "phrack-smash",
      "title": "Smashing The Stack For Fun And Profit",
      "provider": "Phrack / Aleph One",
      "url": "https://phrack.org/issues/49/14.html",
      "tags": [
        "classic",
        "stack",
        "history"
      ],
      "level": "Intermediate",
      "format": "Article",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Phrack archive",
      "summary": "The foundational Phrack article that introduced stack-smashing techniques to a wide audience.",
      "page": "https://exploit.lowlevellibrary.com/entries/phrack-smash/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "how2heap",
      "title": "how2heap",
      "provider": "shellphish",
      "url": "https://github.com/shellphish/how2heap",
      "tags": [
        "heap",
        "glibc",
        "practice",
        "linux"
      ],
      "level": "Advanced",
      "format": "Demo suite (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Small C demos of glibc heap techniques, kept updated as allocator internals change.",
      "page": "https://exploit.lowlevellibrary.com/entries/how2heap/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "heap-exploitation",
      "title": "Heap Exploitation",
      "provider": "Dhaval Kapil",
      "url": "https://heap-exploitation.dhavalkapil.com/",
      "tags": [
        "heap",
        "book",
        "linux"
      ],
      "level": "Advanced",
      "format": "Online book",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Free book explaining heap allocators and common heap exploitation patterns on Linux.",
      "page": "https://exploit.lowlevellibrary.com/entries/heap-exploitation/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "exploit-education",
      "title": "Exploit Education",
      "provider": "Exploit Education",
      "url": "https://exploit.education/",
      "tags": [
        "practice",
        "vms",
        "beginner"
      ],
      "level": "Beginner",
      "format": "VM challenges",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Downloadable VMs (Phoenix, Nebula and others) for learning memory corruption safely.",
      "page": "https://exploit.lowlevellibrary.com/entries/exploit-education/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "overthewire",
      "title": "OverTheWire Wargames",
      "provider": "OverTheWire",
      "url": "https://overthewire.org/wargames/",
      "tags": [
        "practice",
        "wargames",
        "linux"
      ],
      "level": "Beginner",
      "format": "Online wargames",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Long-running free wargames (Bandit, Narnia, Behemoth and more) for stepwise practice.",
      "page": "https://exploit.lowlevellibrary.com/entries/overthewire/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "picoctf",
      "title": "picoCTF",
      "provider": "Carnegie Mellon University",
      "url": "https://picoctf.org/",
      "tags": [
        "practice",
        "ctf",
        "beginner"
      ],
      "level": "Beginner",
      "format": "CTF platform",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Free CTF platform aimed at students, with many binary and exploitation challenges.",
      "page": "https://exploit.lowlevellibrary.com/entries/picoctf/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "rop-emporium",
      "title": "ROP Emporium",
      "provider": "ROP Emporium",
      "url": "https://ropemporium.com/",
      "tags": [
        "rop",
        "practice",
        "linux",
        "windows"
      ],
      "level": "Intermediate",
      "format": "Challenge set",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Focused ROP challenges on Linux and Windows that build gadget chaining skills.",
      "page": "https://exploit.lowlevellibrary.com/entries/rop-emporium/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "pwntools-docs",
      "title": "pwntools documentation",
      "provider": "Gallopsled",
      "url": "https://docs.pwntools.com/en/stable/",
      "tags": [
        "tools",
        "python",
        "automation"
      ],
      "level": "Intermediate",
      "format": "Library docs",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official docs",
      "summary": "Docs for pwntools, the standard Python toolkit for writing exploit scripts and CTF solvers.",
      "page": "https://exploit.lowlevellibrary.com/entries/pwntools-docs/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "pwntools-tutorial",
      "title": "pwntools tutorial",
      "provider": "Gallopsled",
      "url": "https://github.com/Gallopsled/pwntools-tutorial",
      "tags": [
        "tools",
        "tutorial",
        "python"
      ],
      "level": "Beginner",
      "format": "Tutorial (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Guided tutorials for tubes, ELF helpers, ROP and shellcraft in pwntools.",
      "page": "https://exploit.lowlevellibrary.com/entries/pwntools-tutorial/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "rpisec-mbe",
      "title": "Modern Binary Exploitation (MBE)",
      "provider": "RPISEC",
      "url": "https://github.com/RPISEC/MBE",
      "tags": [
        "course",
        "labs",
        "linux"
      ],
      "level": "Intermediate",
      "format": "Course materials (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "RPISEC course materials and labs covering modern binary exploitation techniques.",
      "page": "https://exploit.lowlevellibrary.com/entries/rpisec-mbe/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "cwe-top25",
      "title": "CWE Top 25 Most Dangerous Software Weaknesses",
      "provider": "MITRE",
      "url": "https://cwe.mitre.org/top25/",
      "tags": [
        "reference",
        "cwe",
        "vulns"
      ],
      "level": "Reference",
      "format": "Annual ranking",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official MITRE page",
      "summary": "Annual list of the most dangerous software weaknesses — useful map of exploit classes.",
      "page": "https://exploit.lowlevellibrary.com/entries/cwe-top25/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "liveoverflow",
      "title": "LiveOverflow",
      "provider": "LiveOverflow",
      "url": "https://liveoverflow.com/",
      "tags": [
        "videos",
        "writeups",
        "beginner"
      ],
      "level": "Beginner",
      "format": "Video + blog",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Approachable video explanations of binary exploitation, CTF tricks and systems topics.",
      "page": "https://exploit.lowlevellibrary.com/entries/liveoverflow/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ctf-wiki",
      "title": "CTF Wiki",
      "provider": "CTF Wiki contributors",
      "url": "https://ctf-wiki.org/en/",
      "tags": [
        "wiki",
        "notes",
        "pwn",
        "reverse"
      ],
      "level": "Intermediate",
      "format": "Community wiki",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official wiki",
      "summary": "Community-maintained wiki covering pwn, reverse, crypto and other CTF topics.",
      "page": "https://exploit.lowlevellibrary.com/entries/ctf-wiki/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "fuzzysecurity",
      "title": "FuzzySecurity tutorials",
      "provider": "FuzzySecurity",
      "url": "https://www.fuzzysecurity.com/tutorials.html",
      "tags": [
        "windows",
        "tutorial",
        "exploit-dev"
      ],
      "level": "Intermediate",
      "format": "Tutorial index",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Windows-focused exploit development tutorials spanning stack, SEH and kernel topics.",
      "page": "https://exploit.lowlevellibrary.com/entries/fuzzysecurity/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "project-zero",
      "title": "Google Project Zero blog",
      "provider": "Google Project Zero",
      "url": "https://googleprojectzero.blogspot.com/",
      "tags": [
        "research",
        "writeups",
        "0day"
      ],
      "level": "Advanced",
      "format": "Research blog",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official blog",
      "summary": "In-depth vulnerability research writeups from Google's Project Zero team.",
      "page": "https://exploit.lowlevellibrary.com/entries/project-zero/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ropgadget",
      "title": "ROPgadget",
      "provider": "Jonathan Salwan",
      "url": "https://github.com/JonathanSalwan/ROPgadget",
      "tags": [
        "tools",
        "rop",
        "gadgets"
      ],
      "level": "Intermediate",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Finds ROP gadgets in binaries across many architectures.",
      "page": "https://exploit.lowlevellibrary.com/entries/ropgadget/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "azeria-shellcode",
      "title": "Writing ARM Shellcode",
      "provider": "Azeria Labs",
      "url": "https://azeria-labs.com/writing-arm-shellcode/",
      "tags": [
        "arm",
        "shellcode",
        "tutorial"
      ],
      "level": "Intermediate",
      "format": "Tutorial",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official tutorial",
      "summary": "Practical guide to writing and debugging ARM shellcode.",
      "page": "https://exploit.lowlevellibrary.com/entries/azeria-shellcode/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ret2io",
      "title": "ret2 research blog",
      "provider": "ret2 systems",
      "url": "https://blog.ret2.io/",
      "tags": [
        "research",
        "writeups",
        "browser",
        "kernel"
      ],
      "level": "Advanced",
      "format": "Research blog",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official blog",
      "summary": "High-quality writeups on browser, kernel and advanced exploitation research.",
      "page": "https://exploit.lowlevellibrary.com/entries/ret2io/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "pwndbg",
      "title": "pwndbg",
      "provider": "pwndbg project",
      "url": "https://github.com/pwndbg/pwndbg",
      "tags": [
        "tools",
        "gdb",
        "debugging"
      ],
      "level": "Intermediate",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "GDB plugin that surfaces heap, registers and context useful while developing exploits.",
      "page": "https://exploit.lowlevellibrary.com/entries/pwndbg/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "gef",
      "title": "GEF (GDB Enhanced Features)",
      "provider": "hugsy",
      "url": "https://github.com/hugsy/gef",
      "tags": [
        "tools",
        "gdb",
        "debugging"
      ],
      "level": "Intermediate",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Another popular GDB enhancement focused on exploit development workflows.",
      "page": "https://exploit.lowlevellibrary.com/entries/gef/",
      "free": true,
      "verified": "2026-10-14"
    }
  ]
}