OpenSecurityTraining2

Long overdue things I got done on the OpenSecurityTraining2 beta server this past weekend (with Claude's help): Adding OAuth login via Google & Github, making it email the instructor when students post to Discussions (a feature I've been asking for for years), and removing an annoying first-use "tour" of Open edX (that provides no value and for which there's no feature flag for disablement). All things coming to production soon, after getting some testing on beta while the Arch1901 beta is running. (And for me, a Claude skill to collect better stats about student course completion without me needing to do a bunch of manual work. Obviously I'm loving Claude's ability to fix misc small things that have been bugging me forever.)

IMHO people should learn vulnerabilities by studying past ones, not fake ones. This class makes that easier for beginners.

Uninitialized data use, race conditions (TOCTOU), Use-After-Free (UAF), type confusion & info leaks: Vulnerabilities 1002 https://ost2.fyi/Vulns1002 by Xeno Kovah teaches real CVEs, not fake toy examples. Real exploit walkthroughs included. Level up your 'sploity sense!

Almost a year of study culminates with this course. I started out self-taught and finished with this x86-64 Assembly course. It took about 10 months from scratch to complement the foundation I had in C. Now that this is under my belt, the plan for this year is to progress with SIMD. Thanks to OpenSecurityTraining2 for a great course. #OpenSecurityTraining2

Hey folks, back after completing a mini-course Debuggers 1012: Intro to GDB from OpenSecurityTraining2 by Xeno Kovah. This course is an awesome resource for beginners and anyone with decent experience who wants to refresh their low-level reverse engineering skills. A huge thanks to Xeno for making this content Open Source. #ReverseEngineering #InfoSec #CyberSecurity #GDB #OST2

C++ binaries are notoriously hard to reverse. This class by Gal Zaban teaches you to map them clearly in IDA. Reverse Engineering 3011: Reversing C++ Binaries https://ost2.fyi/RE3011

There's still time to sign up before the next beta of Arch1901 kicks off May 20th!

Learn to use a debugger that runs *beneath* the OS using Intel VT-x. Hidden hooks, TLB splitting, EPT-based monitoring: reverse engineering's secret weapon. Debuggers 3301: HyperDbg https://ost2.fyi/Dbg3301 by Mohammad Sina Karvandi

📢Call for beta testers! (Round 2)📢 The "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" course by Antonio Nappa will begin May 20th. Sign up here: https://lnkd.in/ecymcgR5 This class has received a bunch of revisions based on student feedback! This course explores the fascinating world of emulation, guiding learners from the fundamentals of CPU design to the internals of QEMU and advanced instrumentation techniques.
You will start by understanding what emulation truly means—how software can imitate hardware—and progressively build your own 8-bit CPU emulator in Python (SimpleProc-8), extend it with interrupts, I/O, and MMIO, and finally instrument real-world emulators like QEMU.
The course combines hands-on labs, in-browser exercises, and conceptual lectures to bridge theory and practice, preparing students to tackle topics such as system emulation, hardware-assisted execution, and fuzzing of embedded targets. By the end, you’ll not only understand how emulators work—you’ll be able to build, modify, and analyze them for research, debugging, and vulnerability discovery.

I am glad to share that I have completed Architecture 1005: RISC-V Assembly through OpenSecurityTraining2. The course covers the RISC-V ISA from the ground up — registers, calling conventions, memory operations, control flow, bit shifting, and the M-extension for multiplication and division. It follows a top-down approach, moving from C source code to the corresponding assembly, and concludes with a RISC-V adaptation of the Binary Bomb Lab. Thank you to Xeno Kovah and the OpenSecurityTraining2 team for making this content freely available.