Exploit development — topics
Memory-corruption and exploitation primitives. Per-platform paths: windows-internals, advanced-windows-exploitation, linux-internals, macos-security.
Primers
- c-and-asm-primer
- porting-public-exploits
- native-rce-from-source-review
- custom-windows-shellcode-writing
- pe-backdooring-and-code-caves
- browser-exploitation-primer
- image-decoder-exploitation
- pwn2own-2024-2025-research-roundup
Windows
- stack-buffer-overflow · stack-bof-walkthrough-end-to-end
- seh-overwrite
- egghunters · bad-character-handling
- rop-chains · mona-py
- dep-bypass · aslr-bypass · safeseh-bypass
- heap-exploitation-windows
- control-flow-guard · xfg · cet-shadow-stack
- windows-kernel-architecture
- kernel-stack-overflow · arbitrary-read-write-primitives
- token-stealing-payloads
- type-confusion-kernel · use-after-free-kernel
- kaslr-bypass · cfg-cet-kernel
- fuzzing-windows-drivers
- windows-driver-ioctl-audit
- windows-pool-grooming-techniques
HEVD walkthroughs (OSEE)
- hevd-stack-overflow-walkthrough
- hevd-pool-overflow-walkthrough
- hevd-uaf-walkthrough
- hevd-type-confusion-walkthrough
- vbs-hvci-bypass-walkthrough
- windows-sandbox-and-appcontainer-escape
- edr-bypass-at-exploitation-time
OSED / EXP-301 cluster
- osed-custom-exploit-walkthrough
- osed-egg-hunter-and-staging-deep
- osed-shellcode-encoder-decoder-development
- custom-decoder-development
Linux
- heap-exploitation-linux
- ret2libc · srop · ret2csu
- format-string-bugs
- linux-bof-walkthrough-end-to-end
- linux-kernel-pwn-walkthrough
- kernel-syscall-source-review
macOS
- macos-kernel-debugging · iokit-attack-surface
- macos-userland-mitigations · pac-arm64e-bypass
- macos-kernel-heap-zone · mach-port-exploitation