Curriculum
Choose a track to begin learning, or browse career paths to find the right sequence for your goals.
How the curriculum is laid out
The Be Bitwise curriculum is split into 29 tracks covering the full path from binary representation through CPU architecture, memory, networking, cryptography, reverse engineering, vulnerability research, and exploitation. Tracks are grouped by category — Foundations, Core Computing, Systems Deep Dives, Specialist, Security, and the Mobile Security stack — so you can pick a starting point that matches what you already know.
Each track is a sequence of modules. Each module is a sequence of lessons followed by a checkpoint quiz. Lessons are short pages with diagrams, runnable C and assembly examples, and CPU simulations you can step through in the browser. Checkpoints log to your progress and tell you at a glance which ideas have stuck and which ones need a second pass.
The full curriculum is free to read with a free account; the checkpoints, lesson IDE, and CPU simulations are free as well. The optional 777 tier covers the cost of the heavier tools — a step-through debugger, a decompiler, ROP gadget extraction, the heap visualiser, and hands-on exploit labs in isolated Linux VMs — without ever putting the lesson text itself behind a paywall.
Career paths in the explorer below string several tracks together into a longer route — Reverse Engineering, Vulnerability Research, Exploit Development, Mobile Security, and so on — so you can plan a few months of study without having to assemble the ordering yourself.
Foundations
Foundations
Start here. Learn binary, logic gates, CPU basics, and how registers work.
Coding Fundamentals
The building blocks of writing software - variables, functions, data structures, OOP, and how to think algorithmically.
Memory & Systems
Understand how memory works - from RAM fundamentals to stack and heap allocation and pointer arithmetic.
Hardware Foundations
From transistors up to processors. Trace the path from switches to gates to circuits to running programs, then on through bus architectures, memory technology, FPGAs, and hardware security.
Core Computing
Data & Hashing
Explore data representation, hash functions, hash tables, and probabilistic data structures.
Assembly & OS
Assembly language, operating system internals, system calls, and the wiring that ties them together.
Networking & Cryptography
Computer networking, symmetric and asymmetric encryption, TLS, and applied cryptography.
Systems Deep Dives
CPU Architectures
Deep dives into x86, ARM, and RISC-V architectures - registers, instruction sets, and design philosophy.
Operating Systems
Compare OS architectures, syscall mechanisms, boot processes, and security models across Linux, Windows, and macOS.
Embedded Systems & Firmware
Embedded systems, firmware, bootloaders, memory-mapped I/O, and embedded security.
OS Core Internals
Process management, virtual memory internals, linkers and loaders, ELF/PE formats, and syscall interfaces across operating systems.
Specialist
Reverse Engineering
Reverse Engineering
Read compiled code - disassembly, decompilers, Ghidra, and function hooking fundamentals.
Advanced Reverse Engineering
Advanced RE techniques, anti-reversing countermeasures, malware analysis, and binary patching.
Vulnerability Research
VR Foundations
Vulnerability research methodology - lab setup, attack surface analysis, source code auditing, and concurrency vulnerabilities.
VR Analysis & Discovery
Automated vulnerability discovery - emulation, symbolic execution, dynamic analysis, fuzzing, and real-world case studies.
Exploitation
Exploitation Fundamentals
Stack overflows, heap exploits, ROP chains, integer vulnerabilities, and exploit mitigations.
Exploit Development
From crash to exploit - exploit development methodology, mitigation bypass, and chaining vulnerabilities.
Advanced Exploitation
Kernel exploitation, side-channel attacks, web server exploitation, supply chain attacks, and red team tooling.
Defense & Operations
Applied Security
Zero-Day Research
Responsible disclosure, UK legal framework, CVE process, and the complete zero-day discovery workflow from crash to advisory.
Bug Bounty
Bug bounty programme fundamentals, methodology, reconnaissance, report writing, and building a security career.
API Security
API architectures, the OWASP API Security Top 10, authentication attacks, BOLA/IDOR, GraphQL hacking, and advanced API exploitation.
Mobile Security
Mobile Internals
iOS and Android architecture deep dives - XNU kernel, Secure Enclave, ART runtime, Binder IPC, and how mobile OSes compare to desktop.
Mobile Exploitation
iOS jailbreaking, Android rooting, mobile app testing, exploit chains from checkm8 to FORCEDENTRY, mobile network security, and mobile forensics.
Mobile Application Security
Mobile app vulnerability classes, reverse engineering tools and techniques, and cryptographic implementation on iOS and Android.
Mobile Advanced Security
Bluetooth and wireless attacks, mobile malware analysis, enterprise MDM security, and mobile privacy and data protection.