Corelan Research

Two decades of exploit development research, techniques, and knowledge — shared openly and for free with the community.

Quick links:

Corelan Exploit Development tutorials
Support the community, get Corelan merchandise
Professional Exploit Development training

All articles:

 DEPS - Precise Heap Spray on Firefox and IE10

Introduction Last week, while doing my bi-weekly courseware review and update, I discovered that my heap spray script for Firefox 9 no longer works…

​ Read More

 Heap Layout Visualization with mona.py and WinDBG

Introduction Time flies. Almost 3 weeks have passed since we announced the ability to run mona.py under WinDBG.  A lot of work has been done …

​ Read More

 Jingle BOFs, Jingle ROPs, Sploiting all the things... with Mona v2 !!

Ho Ho Ho friends, It has been a while since we posted something on the Corelan Team blog, I guess we all have been busy doing ... stuff and things,…

​ Read More

 Happy New Year - here's my special gift to you, corelanc0d3r

I'm not going to spend a lot of words on this. Facts speak for themselves.  A short while ago, I discovered this: …

​ Read More

 Corelan T-Shirt contest - Derbycon 2012

If you didn't register your ticket for the Corelan Live Exploit Development training at Derbycon 2012, then there is bad news for you...  …

​ Read More

 HITB2012AMS Day 2 - Ghost in the Allocator

Ghost in the Allocator - Abusing the Windows 7 / 8 Low Fragmentation Heap After introducing himself, Steven Seeley, Senior Penetration Tester and …

​ Read More

Corelan Research is a long-running cybersecurity research project focused on exploit development, vulnerability research and Windows internals.
Since 2009, we have published deep technical tutorials covering topics such as stack-based exploitation, heap exploitation, shellcoding, reverse engineering and debugging.
These tutorials have helped thousands of security researchers, penetration testers, exploit developers and exploit dev trainers learn how modern memory corruption vulnerabilities work.