OpenSecurityTraining2

501(c)(3) Non-Profit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021!

Website: https://ost2.fyi
LinkedIn: https://www.linkedin.com/company/ost2
Reddit: https://reddit.com/r/OST2
Twitter: https://twitter.com/OpenSecTraining
BlueSky: https://bsky.app/profile/opensectraining.bsky.social
Threads: https://www.threads.net/@opensecuritytraining

Last Notes

2026-09-25 12:47:44 UTC

We have posted the YouTube playlist for Trusted Computing 1103: Advanced TPM Usage by Dimi Tomov in partnership with the TCG. Now anyone wishing to download the videos for offline viewing can find all their URLs here:
https://www.youtube.com/playlist?list=PLUFkSN0XLZ-l-hmC2f0f0WHh5tm76LyTj
But as always the best experience is at the full class at https://ost2.fyi/TC1103

2026-09-07 10:41:23 UTC

Want to write kernel exploits or analyze malware? You need to understand Windows internals first. Syscalls, IRQL, pools, mitigations & more. Architecture 2821: Windows Kernel Internals 2 by Cedric Halbronn @npub16zu…a22q https://ost2.fyi/Arch2821

2026-06-29 09:57:03 UTC

GDB is the Swiss Army knife of Linux & embedded debugging. Learn breakpoints, stepping & memory inspection: fast and hands-on. Debuggers 1012: Introductory GDB https://ost2.fyi/Dbg1012

2026-05-11 11:26:27 UTC

Learn to use a debugger that runs *beneath* the OS using Intel VT-x. Hidden hooks, TLB splitting, EPT-based monitoring: reverse engineering's secret weapon. Debuggers 3301: HyperDbg https://ost2.fyi/Dbg3301 by @npub126y…ass7

2026-03-09 11:09:53 UTC

Tired of guessing inputs? Let the computer do the work! Learn about symbolic execution from @npub1mt4…wx7x in "Reverse Engineering 3201" https://ost2.fyi/RE3201 and use SMT solvers to find the exact inputs to reach vulnerable code. Stop guessing, start solving!

2025-11-14 12:47:15 UTC

📢Call for beta testers!📢
The "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" course by Antonio Nappa @npub1262…6s3n will begin November 28th. Sign up here: https://forms.gle/LUXaThn4YSYSvk5D7
This course explores the fascinating world of emulation, guiding learners from the fundamentals of CPU design to the internals of QEMU and advanced instrumentation techniques.  You will start by understanding what emulation truly means—how software can imitate hardware—and progressively build your own 8-bit CPU emulator in Python (SimpleProc-8), extend it with interrupts, I/O, and MMIO, and finally instrument real-world emulators like QEMU.  The course combines hands-on labs, in-browser exercises, and conceptual lectures to bridge theory and practice, preparing students to tackle topics such as system emulation, hardware-assisted execution, and fuzzing of embedded targets.
By the end, you’ll not only understand how emulators work—you’ll be able to build, modify, and analyze them for research, debugging, and vulnerability discovery.

2025-11-03 11:50:31 UTC

This year Binarly has also expanded their sponsorship to the creation of a new Firmware Security Learning Path! https://ost2.fyi/OST2_LP_FWSEC.pdf
This captures current and future plans for classes involving security in the deep-dark of firmware! But Binarly is starting to give visibility into what's going on there with their binary analysis platform.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/485/614/516/791/291/original/6677b0511f439ce0.jpeg

2025-10-27 11:21:34 UTC

We've officially had our 31337th student join at OST2! We're waiting to hear back to see if the lucky registrant wants to be publicly lauded for their random achievement or not ;)

2025-07-14 10:20:53 UTC

📣"Debuggers 1103: Introductory Binary Ninja" is released!📣
https://ost2.fyi/Dbg1103
This class by Xusheng Li of Vector 35 @npub12xs…2nw4 provides students with a hands-on introduction to the free version of Binja as a debugger, thus providing decompilation support!
Like all current #OST2 classes, the core content is made fully public, and you only need to register if you want to post to the discussion board or track your class progress. This mini-class takes approximately 2 hours to complete, and can be used as standalone cross-training for people who know other reverse engineering tools, or by students learning assembly for the first time in the https://ost2.fyi/Arch1001 x86-64 Assembly class.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/851/069/999/119/631/original/0bdfe17ac9a6f690.png

2025-07-07 11:04:01 UTC

📢Call for beta testers!📢
Microsoft mandated the presence of Trusted Platform Modules for new Windows 11 machines. Now's a good time for security experts & hackers to familiarize themselves with what TPMs are, and what they can (and can't) add to the security of a system. You can do that by joining the beta test of the OST2 class "Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries" by William Roberts (maker of the tpm2-pytss library) which will start July 14th and run for 1 month. It will take ~8 hours to complete.
https://forms.gle/cbBazgq7m24QSxTD6
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/811/615/602/782/351/original/67e92aa22ee81c8b.png

2025-02-21 12:13:57 UTC

📢Call for beta testers!📢
The beta for "Fuzzing 1001: Introductory Fuzzing" will start ~ March 7th. It will take ~6 hours to complete. If you're interested in participating, please sign up below.
https://forms.gle/fxCM9Y1CprUJgQi59