pwn-college

Updated 13 Sep 2026

Course Status: Active
Link: https://pwn.college
Course Type: online

•
Overview
- •
  Structured progressive course platform covering assembly through heap exploitation via dojo/module system. Two main dojos: Program Security and Software Exploitation.
•
Tools & Workflow
- •
  Downloading a challenge binary for local/offline analysis
  - •
    rather than reversing entirely inside the dojo shell (r2, objdump, gdb all running against the live instance), the binary can be pulled down via scp for local static analysis, faster iteration, or use with tools not available in-dojo
  - •
    scp -i ~/.ssh/pwn-college hacker@dojo.pwn.college:/challenge/<binary-name> .
  - •
    Useful for offline disassembly, diffing binaries across challenge variants (e.g. comparing Easy vs Hard versions of the same challenge to spot what changed), or running local tooling that isn't installed in the dojo environment itself.
•
Concepts by Module
- •
  Program Security
  - •
    Shellcoding
    •
    Shellcode
    
    •
    Syscall Mechanics (x86-64)
    
    •
    NX-DEP (No-eXecute)
    
    •
    Bad Character Filtering Bypass
    
    •
    Self-Modifying Shellcode
    
    •
    Shellcode Chunking (Short Jumps)
    
    •
    Symlink Path Shortening
  - •
    Memory Corruption
    •
    Foundations
    •
    Buffer Overflow
    
    •
    Stack Frame Layout
    
    •
    Integer Overflow (Signedness Bypass)
    
    •
    Out-of-Bounds Array Access (Index Manipulation)
    
    •
    Protections
    •
    Stack Canary
    
    •
    Address Space Layout Randomization (ASLR)
    
    •
    Full RELRO
    
    •
    Information leaks
    •
    Memory Disclosure (Info Leak)
    
    •
    Arbitrary Read via Pointer Overwrite
    
    •
    Backdoor-Assisted Info Leak (Recursive Self-Leak)
    
    •
    Stale Stack Data Leak (Frame Reuse)
    
    •
    Cross-Frame Buffer Over-Read via Recursion (Nested Frame Leak)
    
    •
    Control flow and state manipulation
    •
    ret2win Technique
    
    •
    Global Offset Table (GOT-PLT)
    
    •
    Self-Referential GOT Overwrite (Target Depends on Corrupted Slot)
    
    •
    Read-Counter Manipulation (Canary Skip)
    
    •
    Exit Guard Bypass (Magic Value on Stack)
    
    •
    Signed Loop Counter Steering (Branch Selection via Negative Modulo)
•
online
•
https://pwn.college
•
online

Linked references 1

Arney Nova

◌ Explore connections in Graph view

pwn-college

Overview

Tools & Workflow

Downloading a challenge binary for local/offline analysis

Concepts by Module

Program Security

Shellcoding

Memory Corruption

Foundations

Protections

Information leaks

Control flow and state manipulation

Linked references 1