I went to a BSides this weekend, and attended a three hour session on binary exploitation. I’ve done some RE for malware analysis, but I’ve never been one to try things from the offensive side. This was an interesting talk seeing how to use the same skills from malware analysis but with the intent of finding and exploiting vulnerabilities. The presenter has created their own platform for learning these techniques called “Binary Jiu-Jitsu” and it’s what we used during the session. I found it to be both fun and a great way to learn. If you’re interested in binary exploitation, I say give this website a shot. It’s free!
Interesting. Looks like a riff on the venerable (and still relevant) pwn.college from ASU.
I forgot about pwncollege. A friend showed me that several years ago and it slipped my mind! It does look similar.