Corelan Research

Two decades of exploit development research, techniques, and knowledge — shared openly and for free with the community.

Quick links:

Corelan Exploit Development tutorials
Support the community, get Corelan merchandise
Professional Exploit Development training

All articles:

 WPA TKIP cracked in a minute - time to move on to WPA2

corelanc0d3rAugust 29, 2009

Just a quick note to let you know that 2 Japanese scientists (from Hiroshima and Kobe Universities) have found a practical way to crack WPA TKIP in …

​ Read More

 Exploit writing tutorial part 4 : From Exploit to Metasploit - The basics

corelanc0d3rAugust 12, 2009

In the first parts of the exploit writing tutorial, I have discussed some common vulnerabilities that can lead to 2 types of exploits : stack based …

​ Read More

 Exploit writing tutorial part 3b : SEH Based Exploits - just another example

corelanc0d3rJuly 28, 2009

In the previous tutorial post, I have explained the basics of SEH based exploits. I have mentioned that in the most simple case of an SEH based …

​ Read More

 Exploit writing tutorial part 3 : SEH Based Exploits

corelanc0d3rJuly 25, 2009

In the first 2 parts of the exploit writing tutorial series, I have discussed how a classic stack buffer overflow works and how you can build a …

​ Read More

 Exploit writing tutorial part 2 : Stack Based Overflows - jumping to shellcode

corelanc0d3rJuly 23, 2009

Where do you want to jmp today ? In one of my previous posts (part 1 of writing stack based buffer overflow exploits), I have explained the basisc …

​ Read More

 Exploit writing tutorial part 1 : Stack Based Overflows

corelanc0d3rJuly 19, 2009

Last friday (july 17th 2009), somebody (nick)named ‘Crazy_Hacker’ has reported a vulnerability in Easy RM to MP3 Conversion Utility (on XP SP2 En), …

​ Read More

Corelan Research is a long-running cybersecurity research project focused on exploit development, vulnerability research and Windows internals.
Since 2009, we have published deep technical tutorials covering topics such as stack-based exploitation, heap exploitation, shellcoding, reverse engineering and debugging.
These tutorials have helped thousands of security researchers, penetration testers, exploit developers and exploit dev trainers learn how modern memory corruption vulnerabilities work.