Scribd
Upload
4 views2 pages

Exploit Development Roadmap

The document outlines a comprehensive roadmap for exploit development, detailing prerequisites in programming, assembly, and OS concepts. It covers core exploitation techniques, essential tools, practice platforms, recommended courses and books, advanced topics, and continuous learning resources. This structured approach aims to guide individuals in mastering the skills necessary for effective exploit development.

Uploaded by

mohit55sri83
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
4 views2 pages

Exploit Development Roadmap

The document outlines a comprehensive roadmap for exploit development, detailing prerequisites in programming, assembly, and OS concepts. It covers core exploitation techniques, essential tools, practice platforms, recommended courses and books, advanced topics, and continuous learning resources. This structured approach aims to guide individuals in mastering the skills necessary for effective exploit development.

Uploaded by

mohit55sri83
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Exploit Development Roadmap

1. Prerequisites
- Programming: C/C++, Python

- Assembly: x86, x86_64, ARM (NASM/AT&T)

- OS Concepts: Linux (proc, memory, system calls), Windows (PE structure, WinAPI)

- Debugging: gdb, radare2, x64dbg

2. Core Exploitation Techniques


- Stack-based Buffer Overflows

- Format String Exploits

- Use-After-Free and Heap Exploitation

- Return Oriented Programming (ROP)

- Bypassing Protections: ASLR, NX, PIE, Stack Canaries

3. Tools
- GDB with GEF/Pwndbg

- Pwntools (Python library for exploit scripts)

- Radare2 / Cutter

- QEMU / VirtualBox

- Heap Exploitation Frameworks (e.g., iRiwns heap-exploitation)

- ROPgadget / Ropper / one_gadget

4. Practice Platforms
- [Link]

- [Link]

- OverTheWire (Narnia, Protostar, Nebula)

- Hack The Box (Pro Labs: Overthewire, Pwnbox)


- CTFs: PicoCTF, CSAW, DEF CON quals, Pwn College

5. Courses & Books


- RPISEC Modern Binary Exploitation (MBE) GitHub

- [Link] gamified binary exploitation

- Hacking: The Art of Exploitation by Jon Erickson

- The Shellcoders Handbook

- Practical Binary Exploitation (PBX)

- CTF 101 ([Link])

6. Advanced Topics
- Kernel Exploitation (Linux & Windows)

- Exploiting Browsers (Chrome/V8, Firefox/SpiderMonkey)

- Hypervisor Exploits

- Custom Payload Development (shellcode, stagers, bind/reverse shells)

- Fuzzing (AFL, libFuzzer, Honggfuzz, Syzkaller)

7. Continuous Learning
- Follow blogs: Trail of Bits, Google Project Zero, LiveOverflow

- Read writeups: CTFTime, 0x00sec, [Link]

- Contribute to open-source CTF challenges or vuln servers

- Stay updated with CVEs and exploit-db

You might also like