https://www.binaryexploitation.org/en/blog Latest from Blog en Mon, 28 Sep 2026 16:01:12 GMT https://www.binaryexploitation.org/en/blog/ctf-learning-path https://www.binaryexploitation.org/en/blog/ctf-learning-path A staged, legal path from C and assembly to CTF pwn challenges: what to learn in which order, practice platforms built for it, lab rules, and how it leads to defensive careers. Florian Amette Mon, 28 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/memory-safe-languages https://www.binaryexploitation.org/en/blog/memory-safe-languages Why memory-safe languages remove whole bug classes, what Rust's ownership model guarantees, where unsafe code and FFI remain risky, and how to harden the C++ you keep. Florian Amette Mon, 28 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/fuzzing-libfuzzer-aflplusplus https://www.binaryexploitation.org/en/blog/fuzzing-libfuzzer-aflplusplus Write a fuzz harness, build it with sanitizers, run libFuzzer and AFL++, manage corpora and dictionaries, and run continuous fuzzing in CI with OSS-Fuzz or ClusterFuzzLite. Florian Amette Sun, 27 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/reading-crash-reports https://www.binaryexploitation.org/en/blog/reading-crash-reports Triage native crashes like a defender: what SIGSEGV and SIGABRT mean, glibc abort messages, gdb and core dumps, ASan reports, WinDbg, and how to prioritise memory-safety crashes. Florian Amette Sun, 27 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/sanitizers-asan-ubsan https://www.binaryexploitation.org/en/blog/sanitizers-asan-ubsan How ASan, UBSan, MSan, TSan and HWASan work, which flags and runtime options to use, how to read an ASan report line by line, and how to run sanitizers in CI. Florian Amette Sat, 26 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/control-flow-integrity https://www.binaryexploitation.org/en/blog/control-flow-integrity How forward-edge and backward-edge control-flow integrity work, from Clang CFI and Microsoft CFG to Intel CET shadow stacks and Arm pointer authentication, and their limits. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/binary-hardening-flags https://www.binaryexploitation.org/en/blog/binary-hardening-flags What each classic exploit mitigation protects, the GCC and Clang flags that enable it, what it costs, and how to verify a binary with checksec and readelf. Florian Amette Thu, 24 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/integer-overflows-format-strings https://www.binaryexploitation.org/en/blog/integer-overflows-format-strings How integer overflow, truncation and signedness errors turn into memory corruption, why user-controlled format strings are dangerous, and the checks and warnings that prevent both. Florian Amette Thu, 24 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/heap-corruption-use-after-free https://www.binaryexploitation.org/en/blog/heap-corruption-use-after-free How heap memory bugs corrupt allocator metadata and object state, why use-after-free is so dangerous, and the allocator hardening, sanitizers and ownership rules that stop them. Florian Amette Wed, 23 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/stack-buffer-overflows https://www.binaryexploitation.org/en/blog/stack-buffer-overflows Why writing past a stack buffer is dangerous, the C patterns that cause it, how compilers and sanitizers catch it, and the fixes and mitigations that contain it. Florian Amette Tue, 22 Sep 2026 00:00:00 GMT https://www.binaryexploitation.org/en/blog/process-memory-layout https://www.binaryexploitation.org/en/blog/process-memory-layout A defender's tour of a Linux process's address space: ELF segments, the stack and calling conventions, the heap, mmap, and why permissions and randomization matter. Florian Amette Mon, 21 Sep 2026 00:00:00 GMT