Corelan Research

Two decades of exploit development research, techniques, and knowledge — shared openly and for free with the community.

 Windows 10 egghunter (wow64) and more

Introduction Ok, I have a confession to make, I have always been somewhat intrigued by egghunters. That doesn't mean that I like to use (or abuse) …

​ Read More

 Windows 10 x86/wow64 Userland heap

Introduction Hi all, Over the course of the past few weeks ago, I received a number of "emergency" calls from some relatives, asking me …

​ Read More

 EncFSGui - GUI Wrapper around encfs for OSX

Introduction 3 weeks ago, I posted a rant about my frustration/concern related with crypto tools, more specifically the lack of tools to implement …

​ Read More

 Crypto in the box, stone age edition

Introduction First of all, Happy New Year to everyone! I hope 2016 will be a fantastic and healthy year, filled with fun, joy, energy, and lots of …

​ Read More

 How to become a pentester

Intro I receive a lot of emails.  (Please don't make it worse, thanks!)   Unfortunately I don't have as much spare time as I used to, or would like …

​ Read More

 Analyzing heap objects with mona.py

Introduction Hi all, While preparing for my Advanced exploit dev course at Derbycon, I've been playing with heap allocation primitives in …

​ Read More