Ask HN: Resource for Learning Binary Exploitation

  • Binary exploitation involves a pretty different skill set compared to web exploitation. You will need to understand the basics of computer architecture and then you can continue to build up skills to learn how to exploit security vulnerabilities in code.

    I haven't used it myself but I've heard good things about https://pwn.college/ . It is run by former organizers of defcon ctf and professors at ASU. UC Berkeley also offers a security course with some pretty digestable modules on binary exploitation at https://sp23.cs161.org/ . Beyond the courses, the best way to improve is just more practice so I would highly recommend just trying your hand at the challenges in a ctf.

    Overall, binary exploitation is a little different as you need some hard skills (ex. understanding what the stack is) to get a good start.