Skip to main content
Be Bitwise

Exploitation Fundamentals

Stack overflows, heap exploits, ROP chains, integer vulnerabilities, and exploit mitigations.

Recommended Prerequisites

These are recommendations - you can start this track at any time.

About this track

Stack overflows, heap exploits, ROP chains, integer vulnerabilities, and exploit mitigations.

The Exploitation Fundamentals track collects 5 modules and 20 lessons into a single ordered path. Each module ends with a checkpoint quiz; passing the checkpoint unlocks the next module so you can track your progress without guessing whether the material has stuck.

You start with "Stack-Based Buffer Overflows" and finish on "Exploit Mitigations". The whole track sits inside the Exploitation area of the curriculum, so the writing assumes the prerequisites listed above and skips ground that an earlier track has already covered.

What this track covers

  • Stack-Based Buffer OverflowsSee what happens when data exceeds its boundaries. Write past a buffer on the stack and watch the return address get overwritten - the foundation of the most common exploit class in computing history.
  • Heap Vulnerabilities & Use-After-FreeExplore what happens when programs mismanage dynamic memory. See dangling pointers in action and understand how attackers exploit freed memory to hijack program behaviour.
  • Return-Oriented ProgrammingWhen you cannot inject new code, reuse what is already there. Learn how attackers chain small instruction sequences ending in RET to build arbitrary programs from existing code.
  • Integer Overflows & Type ConfusionExplore vulnerabilities that arise from how numbers and types are represented in memory. See how an innocent arithmetic operation can wrap around and how misinterpreting data types creates exploitable conditions.
  • Exploit MitigationsDefenders fight back. Learn how stack canaries, ASLR, DEP, and Control Flow Integrity make exploitation harder - and understand why no single defence is enough.

How the track works

Every lesson is a short page with diagrams, runnable examples, and the kind of edge-case footnotes you usually only find in textbooks. Where it makes sense, the lesson is paired with a CPU simulation or a coding challenge so you can poke at the idea instead of just reading about it.

The lessons themselves are free to read with a free account. The 5 checkpoint quizzes that gate the next module are also free, as are the lesson IDE and CPU simulations. Optional 777-tier tools — the step-through debugger, decompiler, ROP gadget builder, heap visualiser, and exploit labs — sit alongside the lessons but are not required to follow the track from start to finish.

You can jump in at any point. Be Bitwise is built around a free forever curriculum, with no time limits and no expiring access. Pick the next lesson when you have an hour; come back when you do not.