Corelan Research

Two decades of exploit development research, techniques, and knowledge — shared openly and for free with the community.

Quick links:

Corelan Exploit Development tutorials
Support the community, get Corelan merchandise
Professional Exploit Development training

All articles:

 Corelan Team reply to false allegation made by Kaspersky

Hi, A few moments ago, I was informed about an article on www.securelist.com and the fact that Corelan Team was mentioned in that post.  …

​ Read More

 Metasploit Meterpreter and NAT

Professional pentesters typically use a host that is connected directly to the internet, has a public IP address, and is not hindered by any …

​ Read More

 A chain is only as strong as its weakest link - DNS Hijack Monitoring

It doesn't really matter how much time your developers have spent writing secure code and how many layers of security you have implemented to …

​ Read More

 Using DBI for solving Reverse Engineering 101 – Newbie Contest from eLearnSecurity

Introduction Last weekend I had some time so I wanted to have a look at a reversing challenge which you can find here: …

​ Read More

 Zabbix SQL Injection/RCE - CVE-2013-5743

Introduction First off, please do not throw a tomato at me since this is not the typical Windows binary exploit article that is posted on …

​ Read More

 Corelan Logo Contest - The submissions

Hi all,   As announced a couple of weeks ago, the Corelan Logo contest is now closed, which means we are no longer accepting new submissions.…

​ Read More

Corelan Research is a long-running cybersecurity research project focused on exploit development, vulnerability research and Windows internals.
Since 2009, we have published deep technical tutorials covering topics such as stack-based exploitation, heap exploitation, shellcoding, reverse engineering and debugging.
These tutorials have helped thousands of security researchers, penetration testers, exploit developers and exploit dev trainers learn how modern memory corruption vulnerabilities work.