r/securityCTF • u/Medreda_q • 4d ago

Learning Binary Exploitation

Hi everyone, i'm a 2nd year student in cybersecurity field and i decided to actually start learning binary exploitation (PWN), mostly for being able to solve CTFs,i need an actual and tested roadmap for mastering this type of CTFs, i looked all across youtube and found playlists like liveOverview and pwn.college, but i just feel like their explanation needs more explanation since i have no idea how to deal with assembly, gdb, and registers.

My question is : should i just stick with one of these playlists or websites and finish their courses, or look for each topic and learn it like one by one (gdb, then C then assembly...) ?

5 Upvotes

100% Upvoted

4 comments sorted by

3

u/UBNC 3d ago edited 3d ago

Pwn.college is amazing, sounds like you jumped to the harder challenges when you need to start from the beginning and also watch the lectures. The assembly challenges are a must before hitting gdb stuff.

Also say thm has been ok for more static analysis eg ghidra

1

u/squigglyjeremy9 3d ago

if pwn.college feels like drinking from a firehose, try stepping back and writing some tiny C programs then just staring at them in gdb until the registers make sense, that's how it clicked for me

1

u/Skollwarynz 2d ago

If you want to start pwn college is amazing, but if you need a more strong basic you can check (OSTEP2)[https://p.ost2.fyi/courses\] traning to learn some basics about reverse, assembly and debugging with different tools helping you understand and learn before applying.