Super Awesome Fuzzing, Part One

by Atte Kettunen and Eero Kurimo, 2017

From Fuzzing Apache httpd Server to CVE-2017-7668 and a $1500 Bounty

by Javier Jiménez, 2017

Root cause analysis of integer flow

by Corelan Team, 2013

The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities

by Mark Dowd, John McDonald, Justin Schuh - published 2006, ISBN-13: 978-0321444424 / ISBN-10: 9780321444424

The Shellcoder's Handbook: Discovering and Exploiting Security Holes

by Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte - published 2007, 2nd Edition, ISBN-13: 978-0470080238 / ISBN-10: 047008023X

Advanced Windows Exploitation (AWE)

by Offensive Security with complementary OSEE (Offensive Security Exploitation Expert) Certification

Cracking The Perimeter (CTP)

by Offensive Security, with complementary OSCE (Offensive Security Certified Expert) Certification

Modern Binary Exploitation (CSCI 4968)

by RPISEC at Rensselaer Polytechnic Institute in Spring 2015. This was a university course developed and run solely by students to teach skills in vulnerability research, reverse engineering, and binary exploitation.

Software Security Course on Coursera

by University of Maryland.

Offensive Computer Security

by W. Owen Redwood and Prof. Xiuwen Liu.

DEF CON

Las Vegas, NV, USA

Black Hat

Las Vegas, NV, USA

Black Hat Europe

London, UK //🔥Join me this year on Dec, 7-10, 2020!

BSides

Worldwide

BruCON

Brussels, Belgium

Chaos Communication Congress (CCC)

Hamburg, Germany

Code Blue

Tokyo, Japan

Nullcon

Goa, India

44CON

London, UK

AppSecUSA

Washington DC

OWASP AppSec EU

Europewide

Positive Hack Days

Moscow, Russia

ZeroNights

Moscow, Russia

WarCon

Warsaw, Poland

Vulnerabilities 101: How to Launch or Improve Your Vulnerability Research Game

by Joshua Drake and Steve Christey Coley at DEFCON 24, 2016

Writing Vulnerability Reports that Maximize Your Bounty Payouts

by Kymberlee Price, originally presented at Nullcon, 2016

Browser Bug Hunting: Memoirs of a Last Man Standing

, by Atte Kettunen, presented at 44CON, 2013

HackSys Extreme Vulnerable Windows Driver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Vulnerabilities 101: How to Launch or Improve Your Vulnerability Research Game [PDF]

by Joshua Drake and Steve Christey Coley at DEFCON 24, 2016

Effective File Format Fuzzing [PDF]

by Mateusz “j00ru” Jurczyk presented at BlackHat EU, 2016

Bootstrapping A Security Research Project [PDF]

or Speaker Deck - by Andrew M. Hay at SOURCE Boston, 2016

Bug Hunting with Static Code Analysis [PDF]

by Nick Jones, MWR Labs, 2016

CVE

Common Vulnerabilities and Exposures, maintained by the MITRE Corporation

CWE

Common Weakness Enumeration, maintained by the MITRE Corporation

CVSS

Common Vulnerability Scoring System, maintained by FIRST (Forum of Incident Response and Security Teams)

ISO/IEC 29147:2014

Vulnerability Disclosure Standard

RFPolicy 2.0

Full Disclosure Policy (RFPolicy) v2.0 by Packet Storm

TSIG Authentication Bypass Through Signature Forgery in ISC BIND [PDF]

Clément BERTHAUX, Synacktiv, CVE-2017-3143

Taking Windows 10 Kernel Exploitation to the Next Level – Leveraging WRITE-WHAT-WHERE Vulnerabilities in Creators…

Morten Schenk, originally presented at Black Hat 2017

Windbg

The preferred debugger by exploit writers.

ltrace

Intercepts library calls

ansvif

An advanced cross platform fuzzing framework designed to find vulnerabilities in C/C++ code.

Metasploit Framework

A framework which contains some fuzzing capabilities via Auxiliary modules.

Spike

A fuzzer development framework like sulley, a predecessor of sulley.

Google Sanitizers

A repo with extended documentation, bugs and some helper code for the AddressSanitizer, MemorySanitizer, ThreadSanitizer, LeakSanitizer. The actual code resides in the LLVM repository.

FLARE VM

FLARE (FireEye Labs Advanced Reverse Engineering) a fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing, etc.

hackers-grep

The hackers-grep is a tool that enables you to search for strings in PE files. The tool is capable of searching strings, imports, exports, and public symbols (like woah) using regular expressions.

Grinder

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

Choronzon

An evolutionary knowledge-based fuzzer

boofuzz

A fork and successor of Sulley framework

Google Chrome issue tracker

The Chromium Project. Google Account Required

Corelan Team

FuzzySecurity

by b33f

Fuzzing Blogs

by fuzzing.info

j00ru//vx tech blog

Coding, reverse engineering, OS internals covered one more time

jksecurity

MortenSchenk

SecuriTeam Secure Disclosure (SSD)

SSD provides the support you need to turn your experience uncovering security vulnerabilities into a highly paid career. SSD was designed by researchers, for researchers and will give you the fast response and great support you need to make top dollar for your discoveries.

The Zero Day Initiative (ZDI)

ZDI is originally founded by TippingPoint, is a program for rewarding security researchers for responsibly disclosing vulnerabilities. Currently managed by Trend Micro.

Hack with Github

Open source hacking tools for hackers and pentesters.

Movies for Hackers

A list of movies every cyberpunk must watch.

SecLists

SecLists is the security tester's companion.