#exploitdev — Public Fediverse posts

AI is changing vulnerability research and exploit development but it's only as effective as the expertise behind it.

Corelan training combines deep technical knowledge with practical AI-assisted workflows. Learn to analyze vulnerabilities, develop reliable exploits, improve your prompting, automate repetitive tasks, and validate every result with a rigorous methodology. AI doesn't replace expertise. It amplifies it.

https://bit.ly/corelan-training

#Corelan #VulnerabilityResearch #ExploitDev #AISkill

⏱️ Tick. Tick. Tick.

🚨 LAST CALL — AUSTRALIA

Corelan Stack → Corelan Heap
Back-to-back • Melbourne

Last seats • Final week • Unbeatable price

📅 Stack: 3–6 Feb
📅 Heap: 9–12 Feb

👉 Register now:

https://events.humanitix.com/corelan-stack-based-exploit-development-heap-exploitation-masterclass-ve2gkbs9

#corelan #exploitdev #melbourne #lastcall

🔥🚨 𝗟𝗔𝗦𝗧 𝗖𝗔𝗟𝗟 — 𝗟𝗔𝗦𝗧 𝗗𝗔𝗬𝗦 · 𝗙𝗜𝗡𝗔𝗟 𝗦𝗘𝗔𝗧𝗦 🚨🔥

🇸🇬 Corelan Heap — Singapore

📅 Jan 12–15, 2026

🧠 Evidence-based learning
🔬 Learn how to do your own research
🧩 Memorigami — deep heap internals
💧 Memory leak strategies
🛠️ Heap exploitation

🎓 Corelan Heap + Stack = CCED

👉 https://www.redfacers.com/academy/corelan

#corelan #heap #memorigami #exploitdev #cced #singapore

🚨 For the FIRST TIME EVER 🚨

🌍🔥 Corelan Heap — Istanbul, Turkey 🔥🌍
🤝 In collaboration with Hackers Academy

🧠 Windows heap internals
🪄 Precise heap layout control (Memorigami)
🛠️ Hands-on, real-world exploit scenarios

📍 March 23-26, 2026

🔗 https://corelan.hackersacademy.com/

#corelan #heap #exploitdev #cced

I have identified an out-of-bounds write vulnerability affecting the Grassroots DICOM library versions 3.0.24 and prior. Parsing a malformed DICOM image triggers out-of-bound memory access resulting in a segfault. Software utlizing GDCM for DICOM parsing is affected. GDCM, SimpleITK, and medInria have released patches.

CVE-2025-11266

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-345-01

#CyberSecurity #ExploitDev #CVE #Infosec #Exploit

2026 is around the corner, some will earn CCED.

Will you be one of them?

www.corelan-certified.com

#corelan #stack #heap #masterclass #road2cced #cced #corelanacademy #exploitdev #windows11

⚠️ Afraid of public classes?

🔒 Corelan Academy = private, intense, small-group exploit dev training

2–8 ppl • one-on-one access • flexible timing • competitive pricing • Stack & Heap

DM or reply interested

#corelan #exploitdev #training #heap #stack #corelanacademy

Just published a proof-of-concept exploit for CVE-2025-32463, a new Linux privilege escalation vulnerability affecting sudo discovered and disclosed by Stratascale about 2 weeks ago.

The PoC is available on GitHub. A full technical writeup will be published on my blog soon.

GitHub: https://github.com/morgenm/sudo-chroot-CVE-2025-32463

#CyberSecurity #ExploitDev #Linux #CVE #PrivilegeEscalation #Infosec #Exploit #Rust #PrivEsc

Just published a proof-of-concept exploit for CVE-2025-32463, a new Linux privilege escalation vulnerability affecting sudo discovered and disclosed by Stratascale about 2 weeks ago.

The PoC is available on GitHub. A full technical writeup will be published on my blog soon.

GitHub: https://github.com/morgenm/sudo-chroot-CVE-2025-32463

#CyberSecurity #ExploitDev #Linux #CVE #PrivilegeEscalation #Infosec #Exploit #Rust #PrivEsc

🔔 Reminder: Zürich, Corelan Stack is coming Oct 7–10, 2025
✅ No nonsense, No BS
✅ Just real-world exploit dev skills

🎟️ https://www.eventcreate.com/e/sigs-corelan-stack-based-exploit-development

💛 RT appreciated! #corelan #win11 #exploitdev

💥 Push, Pop, Boom.

 Corelan Stack isn’t just another exploit dev course — it’s where things finally click.

Expert-level stack exploitation. Zero fluff. The OG.

 🧠 Hands-on labs that challenge.
 🔥 Taught by a pioneer in the field.

"Filled in gaps I didn’t even know I had." — Fabio, Brazil

 👉 https://bit.ly/corelan-training

#Corelan #Stack #Windows11 #ExpertLevel #ExploitDev #Cybersecurity #Infosec #Hacking #Training

Go beyond just using Metasploit – learn to build with it.

This comprehensive 2nd Edition guides you with foundational commands through porting public exploits (Chapter 12), building your own modules in Ruby (Chapter 13), and even fuzzing for novel vulnerabilities (Chapter 14).

Elevate individual skills while enriching the broader field. #Metasploit #InfoSec #ExploitDev #CyberSecurity

https://nostarch.com/metasploit-2nd-edition

Go beyond just using Metasploit – learn to build with it.

This comprehensive 2nd Edition guides you with foundational commands through porting public exploits (Chapter 12), building your own modules in Ruby (Chapter 13), and even fuzzing for novel vulnerabilities (Chapter 14).

Elevate individual skills while enriching the broader field. #Metasploit #InfoSec #ExploitDev #CyberSecurity

https://nostarch.com/metasploit-2nd-edition

Your exploit dev training journey starts right here!

Corelan’s “Expert-Level Stack” exploit dev course for Windows 11 delivers unmatched depth, quality, and hands-on experience.

What our students say on the #Corelan Stack course:

🗣️ “Peter will refute about every single thing you might have learned so far related to the topic in other courses… and then teach you it the right way from the ground up”

See for yourself: 👉🏼👉🏼👉🏼 https://bit.ly/corelan-training

#corelan #stack #exploitdev #win11

Moving from Slack to Discord. You're welcome to join, hang out, contribute to the community. Be nice. discord.gg/DjfR5ntXrb #corelancommunity #corelantraining #exploitdev #safeplace

Still looking for a reason to take a Corelan Training?
👇👇👇👇👇
https://bit.ly/corelan-training

#corelan #stack #heap #exploitdev #windows11

5 reasons to take a 𝑪𝒐𝒓𝒆𝒍𝒂𝒏 class:

💛 All created & taught by @corelanc0d3r - It's a real class, yo
💭 Real skills, No hand-holding
🔬 Unmatched depth in stack & heap coverage
💪🏼 Mastery, not just basics
💰 Exclusive post-training support

#corelan #stack #heap #exploitdev #windows11 #corelantraining #masterclass

👉🏼 Sign up NOW, find out for yourself 👉🏼 https://bit.ly/corelan-training

🙏🏻 Sharing is caring 💛

𝑪𝒊𝒂𝒐 𝑰𝒕𝒂𝒍𝒚, 𝑪𝒊𝒂𝒐 𝑹𝒐𝒎𝒂! 𝑹𝒆𝒂𝒅𝒚 𝒇𝒐𝒓 𝑪𝒐𝒓𝒆𝒍𝒂𝒏?

Sign up for our Expert-level stack class: https://bit.ly/corelan-training

#corelan #stack #exploitdev #windows11

Still looking for a reason to take a Corelan Training?
👇👇👇👇👇
https://bit.ly/corelan-training

#corelan #stack #heap #exploitdev #windows11

ronin-exploits 1.0.6 and 1.1.0.rc2 have been released.
https://ronin-rb.dev/blog/2024/06/28/ronin-exploits-1.0.6-and-1-1-0-rc2-released.html
#ronin #roninrb #ruby #infosec #securitytools #exploitdev #opensource

Finding deserialization bugs in Solarwinds: https://www.zerodayinitiative.com/blog/2023/9/21/finding-deserialization-bugs-in-the-solarwind-platform #exploitdev

Finding deserialization bugs in Solarwinds: https://www.zerodayinitiative.com/blog/2023/9/21/finding-deserialization-bugs-in-the-solarwind-platform #exploitdev

This week was the last public class of 2023, we’re already filling up the agenda for 2024. However, we still have some timeslots for private classes. (either at your company or in Belgium, for small groups). Interested? DM for info! #corelan #exploitdev #windows11 #stack #heap

Stoked for class this week at Deep Conference (Zagreb, Croatia), Ready to give my all. Bring it on folks! #excited #corelan #bootcamp #exploitdev #windows11 #inpersontraining

ONE more chance to take our popular Bootcamp in 2023 anywhere in the world. We’re setting up camp in beautiful Croatia (Zagreb). High-quality materials, real class, real instructor (AND the perfect prep for our heap exploitation class). Seats are selling fast! What are you waiting for?? https://deep-conference.com/predeep-bootcamp/  #corelan #windows11 #exploitdev

Here is my writeup for CVE-2023-28244, if you are interested in that sort of thing: https://terrapinlabs.io/posts/cve-2023-28244/

#ExploitDev #CVE #CVE_2023_28244 #kerberos

Here is my writeup for CVE-2023-28244, if you are interested in that sort of thing: https://terrapinlabs.io/posts/cve-2023-28244/

#ExploitDev #CVE #CVE_2023_28244 #kerberos

📢 Don’t forget to sign up for one of our advanced hands-on #infosec trainings! The first week of #RETURN23XPLOIT is only a few days away. Our trainings offer hands-on instruction from top industry experts. In week 1, learn #Diffing, #ExploitDev, #ARM64, #ReverseEngineering, #IDAPro & more. Don't miss out!

https://ringzer0.training/

#cybersecurity #training

Level up your #cybersecurity skills with #RETURN23XPLOIT! Our trainings offer hands-on instruction from top industry experts. In week 1, learn #Diffing, #ExploitDev, #ARM64, #ReverseEngineering, #IDAPro & more. Don't miss out!

https://ringzer0.training/

#infosec #training

I don't think I posted one here yet, so:

#introduction #introductions

I'm into #infosec - I've done application/bootloader/embedded #ReverseEngineering / #reversing but also know my way around #appsec and #websec and #ExploitDev :)

I like #SoftwarePreservation (keep copying those floppies and dumping all the rare media!)

I like #gameing #gaming but haven't really played anything that much recently. Historically I've enjoyed #pokemon (I have a wood carving of blaziken on my wall!) #mario #metroid #halo #fifa - I prefer using console because I prefer to work on my PC and big games take up so much disk space these days! (Not to mention I've heard about lots of invasive anti-cheat that flags just having typical reversing tools open!)

I don't like cats, I prefer #dogs :)

I like watching sports sometimes - association #football, #tennis, #snooker mainly.