Corelan Research

Two decades of exploit development research, techniques, and knowledge β€” shared openly and for free with the community.

Quick links:

πŸ“‘ Exploit Development 
tutorials

πŸŽ₯​ Exploit Development 
videos

πŸ“š Tutorials on Debugging

🧑 Support us

⭐️ Exploit Development training

All articles:

 Crypto in the box, stone age edition

Introduction First of all, Happy New Year to everyone! I hope 2016 will be a fantastic and healthy year, filled with fun, joy, energy, and lots of …

​ Read More

 How to become a pentester

Intro I receive a lot of emails. Β (Please don't make it worse, thanks!) Β  Unfortunately I don't have as much spare time as I used to, or would like …

​ Read More

 Analyzing heap objects with mona.py

Introduction Hi all, While preparing for my Advanced exploit dev course at Derbycon, I've been playing with heap allocation primitives in …

​ Read More

 CSO : Common Sense Operator/Operations

As the CSO/CISO/person responsible for Information Security, your job is to...  well ... do you even know?  Does upper management …

​ Read More

 HITB2014AMS - Day 2 - On Her Majesty's Secret Service: GRX & A Spy Agency

Last year, Belgacom got hacked by an intelligence service (GCHQ?), Rob says. "What is so interesting about this hack, why did they hack into …

​ Read More

Corelan Research is a long-running cybersecurity research project focused on exploit development, vulnerability research and Windows internals.   Since 2009, we have published deep technical tutorials covering topics such as stack-based exploitation, heap exploitation, shellcoding, reverse engineering and debugging. 
These tutorials have helped thousands of security researchers, penetration testers, exploit developers and exploit dev trainers learn how modern memory corruption vulnerabilities work.