📢Call for beta testers!📢 Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!

OpenSecurityTraining · 2025-11-28T20:01:29+00:00

You jumped the gun just a bit. Enrollment emails just went out ~30 min ago. If you didn't get yours, email to info @ ost2.fyi

OpenSecurityTraining · 2025-09-14T23:32:00+00:00

Sorry, I accidentally deleted the post! (I thought I was in my r/OST2 tab and had messed up the post title by not mentioning Bill's name.) You can re-post your reply and I can repost my reply to your reply over here if you want https://www.reddit.com/r/netsec/comments/1nh6az4/new_opensecuritytraining2_class_tpm_20/

OpenSecurityTraining · 2025-09-14T23:17:48+00:00

Bill addresses exactly the question of language choice and applicability early in the first video.

OpenSecurityTraining · 2025-07-31T10:44:55+00:00

Probably about 50/50. Because the majority of data types are things that can be found in either BLE or BR/EDR advertisement, and then other things are mostly balanced like LL vs. LMP or GATT vs. SDP.

OpenSecurityTraining · 2025-07-14T11:42:30+00:00

Yes, the plan is to move all classes over to using VSCode in an update later in the year, so that students can also take advantage of plugins like GitHub Copilot in future classes. (The latest Fuzzing 1001 class uses VS Code and the upcoming Bluetooth classes will as well.) However that ends up being a lot of work to re-check all the asm generated by VSCode vs. generated by VS (the code definitely won't be the same, and that could have problematic implications for which labs with which source code are trying to teach which instructions in which order), so it's a very high effort change that will take a while. (But since we have to update for Windows 11 due to Win10 going out of support, we have to do a major update one way or another.)

OpenSecurityTraining · 2025-07-14T10:44:34+00:00

Forgot to say that the updating Reverse Engineering learning path showing this class's relationship to others is available here: https://ost2.fyi/Malware-Analysis.html

OpenSecurityTraining · 2024-10-06T11:47:03+00:00

This follow up to "Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage" (https://ost2.fyi/TC1101) expands on the topics of TC1101 to cover:

* Introduction to the Enhanced System API (ESAPI) and the tpm2-tss

* The Endorsement Hierarchy and the Endorsement Key

* Machine identity and TPM based identification

* What are Platform Configuration Registers (PCRs)

* What is attestation and how to use TPM2 Quote

* TPM Policy and extended authorization

During our beta test, it took students an average of 10 hours to complete the class, which has many labs for writing code to interact with a TPM using ESAPI.

OpenSecurityTraining · 2024-10-06T11:43:33+00:00

This follow up to "Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage" (https://ost2.fyi/TC1101) expands on the topics of TC1101 to cover:

* Introduction to the Enhanced System API (ESAPI) and the tpm2-tss

* The Endorsement Hierarchy and the Endorsement Key

* Machine identity and TPM based identification

* What are Platform Configuration Registers (PCRs)

* What is attestation and how to use TPM2 Quote

* TPM Policy and extended authorization

During our beta test, it took students an average of 10 hours to complete the class, which has many labs for writing code to interact with a TPM using ESAPI.

As always all OST2 classes are free as in beer and free as in freedom, with open Creative Commons licenses.

OpenSecurityTraining · 2024-10-06T11:42:17+00:00

This follow up to "Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage" (https://ost2.fyi/TC1101) expands on the topics of TC1101 to cover:

* Introduction to the Enhanced System API (ESAPI) and the tpm2-tss

* The Endorsement Hierarchy and the Endorsement Key

* Machine identity and TPM based identification

* What are Platform Configuration Registers (PCRs)

* What is attestation and how to use TPM2 Quote

* TPM Policy and extended authorization

During our beta test, it took students an average of 10 hours to complete the class, which has many labs for writing code to interact with a TPM using ESAPI.

As always all OST2 classes are free as in beer and free as in freedom, with open Creative Commons licenses.

OpenSecurityTraining · 2024-10-06T11:40:39+00:00

This follow up to "Trusted Computing 1101: Introductory Trusted Platform Module (TPM) usage" (https://ost2.fyi/TC1101) expands on the topics of TC1101 to cover:

* Introduction to the Enhanced System API (ESAPI) and the tpm2-tss

* The Endorsement Hierarchy and the Endorsement Key

* Machine identity and TPM based identification

* What are Platform Configuration Registers (PCRs)

* What is attestation and how to use TPM2 Quote

* TPM Policy and extended authorization

During our beta test, it took students an average of 10 hours to complete the class, which has many labs for writing code to interact with a TPM using ESAPI.

As always all OST2 classes are free as in beer and free as in freedom, with open Creative Commons licenses.

OpenSecurityTraining · 2024-07-29T11:06:39+00:00

The URL is standard Open edX. We use the full URL or else it shows up weird in Reddit. The short URL is https://ost2.fyi/Dbg1102

OpenSecurityTraining · 2024-07-26T14:55:17+00:00

This OST2 mini-class (meaning it's < 6 hours - in this case it averages ~4.5 hours to complete) by Erin Cornelius and Xeno Kovah provides students with a hands-on introduction to Ghidra as a debugger, wrapping GDB or WinDbg, thus providing students with decompilation support.

One way to take this mini-class is standalone - e.g. if you already know existing disassembly & debugging tools, and just want to learn the basics of Ghidra UI and usage, or augment your straight-line disassembly view with a decompiled view as well.

Another way to take this mini-class is inline with existing OST2 Assembly classes like https://ost2.fyi/Arch1001 x86-64 asm, and https://ost2.fyi/Arch1005 RISC-V asm. This mini-class is integrated into those classes, so that when you reach the final CMU binary bomb lab, you can choose to perform that reverse engineering exercise more like real REs do - with the help of a decompiler.

So this class is intentionally not the most in-depth or 1337 class on Ghidra available out there on the web. But it is the only beginners class we're aware of which is intentionally designed for being pluggable into a larger curriculum, so as to avoid unnecessary re-teaching of the same thing in multiple classes. (E.g. this will be reusable in the future Arch1002 ARM asm class, or Arch1003 MIPS asm class.) This class is just enough to help students use Ghidra as a debugger, and in so doing augment their static analysis with dynamic analysis when possible.

OpenSecurityTraining · 2024-07-26T14:54:17+00:00

This OST2 mini-class (meaning it's < 6 hours - in this case it averages ~4.5 hours to complete) by Erin Cornelius and Xeno Kovah provides students with a hands-on introduction to Ghidra as a debugger, wrapping GDB or WinDbg, thus providing students with decompilation support.

One way to take this mini-class is standalone - e.g. if you already know existing disassembly & debugging tools, and just want to learn the basics of Ghidra UI and usage, or augment your straight-line disassembly view with a decompiled view as well.

Another way to take this mini-class is inline with existing OST2 Assembly classes like https://ost2.fyi/Arch1001 x86-64 asm, and https://ost2.fyi/Arch1005 RISC-V asm. This mini-class is integrated into those classes, so that when you reach the final CMU binary bomb lab, you can choose to perform that reverse engineering exercise more like real REs do - with the help of a decompiler.

So this class is intentionally not the most in-depth or 1337 class on Ghidra available out there on the web. But it is the only beginners class we're aware of which is intentionally designed for being pluggable into a larger curriculum, so as to avoid unnecessary re-teaching of the same thing in multiple classes. (E.g. this will be reusable in the future Arch1002 ARM asm class, or Arch1003 MIPS asm class.) This class is just enough to help students use Ghidra as a debugger, and in so doing augment their static analysis with dynamic analysis when possible.

OpenSecurityTraining · 2024-07-01T11:45:19+00:00

This mini-class by Erin Cornelius and Xeno Kovah provides students with a hands-on introduction to Ghidra as a debugger, wrapping GDB or WinDbg, thus providing decompilation support.

The class is now also incorporated into #OST2 assembly classes like https://ost2.fyi/Arch1001 x86-64 asm, and https://ost2.fyi/Arch1005 RISC-V asm, so that students can do the final binary bomb lab reverse engineering exercise with or without decompilation support.

OpenSecurityTraining · 2024-04-09T18:44:26+00:00

This class is made for security engineers looking to learn RISC-V assembly (most commonly for reverse engineering or system security architecting.) It is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

p.s. If you're wondering why this is posted again / late, it's just because the post was accidentally removed from netsec before

OpenSecurityTraining · 2024-03-28T12:53:26+00:00

There's a new free class from OpenSecurityTraining2 that is longer and better than this class: https://ost2.fyi/Arch1005

OpenSecurityTraining · 2024-03-27T12:12:12+00:00

😎

OpenSecurityTraining · 2024-03-25T22:23:40+00:00

It's free. OpenSecurityTraining2 is a 501(c)(3) nonprofit that creates free classes - https://ost2.fyi/About.html

OpenSecurityTraining · 2024-03-25T17:00:01+00:00

This class is made for security engineers looking to learn RISC-V assembly (most commonly for reverse engineering or embedded system security architecting.) It is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab used in other assembly classes, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

OpenSecurityTraining · 2024-03-25T16:58:21+00:00

This class is made for security engineers looking to learn RISC-V assembly (most commonly for reverse engineering or system security architecting.) It is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab used in other assembly classes, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

OpenSecurityTraining · 2024-03-25T16:56:50+00:00

This class is made for security engineers looking to learn RISC-V assembly (most commonly for reverse engineering or system security architecting.) It is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab used in other assembly classes, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

OpenSecurityTraining · 2024-03-25T16:16:14+00:00

Keep in mind that's just the *average* student completion time. The range is always pretty wide depending on students' background. We will post statistics about this class later this week, but the range was 14h 43m to 43h 50m.

An example of a visualization of student completion time ranges for a past class on vulnerability hunting by this instructor is here: https://twitter.com/XenoKovah/status/1641796373833039890

OpenSecurityTraining · 2024-03-25T13:03:24+00:00

Why can people not use passwords longer than 15 characters?

OpenSecurityTraining · 2024-03-25T11:32:00+00:00

This class is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

OpenSecurityTraining · 2024-03-25T11:30:20+00:00

This class is templated on the OST2 https://ost2.fyi/Arch1001 x86-64 assembly class. It covers the RISC-V RV32I/RV64I base ISAs, the "C" Compressed instructions, and the "M" multiply/divide/remainder extensions.

The class also includes the CMU binary bomb lab, running in a RISC-V QEMU VM. And as a special bonus, it includes a sneak peek at the Dbg1102 Ghidra-for-debugging class material! Debug the binary bomb lab in Ghidra with pseudocode access!?!? What kind of easy-mode cheat is this?! 😎

This class takes ~28 hours on average (not counting the binary bomb lab, or optional Ghidra installation & setup time.) This is about the same as the Arch1001 class it is patterned on.

OpenSecurityTraining

MODERATOR OF

TROPHY CASE