Corelan Research

Two decades of exploit development research, techniques, and knowledge — shared openly and for free with the community.

Quick links:

Corelan Exploit Development tutorials
Support the community, get Corelan merchandise
Professional Exploit Development training

All articles:

 BlackHatEU2013 - Day 1 - To dock or not to dock

Time flies !  After hanging out with @repmovsb and @botherder, it's time for the last talk of the day.  In the "To dock or not to dock, that is the …

​ Read More

 BlackHatEU2013 - Day1 - Hardening Windows 8 Apps for the Windows Store

The first talk after having lunch at BlackHat Europe 2013, title "Hardening Windows 8 Apps for the Windows Store" is delivered by Bill Sempf …

​ Read More

 BlackHatEU2013 - Day1 - Hacking Appliances

The second talk I'm attending today is presented by Ben Williams, who's going to talk about "Ironic exploitation of security products". He explains …

​ Read More

 BlackHatEU2013 - Day1 - Practical Attacks against MDM solutions

Good morning everyone, Welcome to BlackHat Europe 2013 !  As announced in my post a couple of days ago, I'll try to post short write-ups about some…

​ Read More

 Black Hat Europe 2013 - Preview

  Hola dear friends, There's only a few days left until Black Hat Europe 2013 opens its doors in the beautiful city of Amsterdam, the …

​ Read More

 Root Cause Analysis – Memory Corruption Vulnerabilities

Introduction For the past year or so I've spent a significant amount of time fuzzing various applications with the hopes of identifying exploitable…

​ Read More

Corelan Research is a long-running cybersecurity research project focused on exploit development, vulnerability research and Windows internals.
Since 2009, we have published deep technical tutorials covering topics such as stack-based exploitation, heap exploitation, shellcoding, reverse engineering and debugging.
These tutorials have helped thousands of security researchers, penetration testers, exploit developers and exploit dev trainers learn how modern memory corruption vulnerabilities work.