4 ms·

>Learn whatever assembly language first On this front, I can highly recommend these two resources, preferably in this order for someone totally new to assembly

>Learn whatever assembly language first On this front, I can highly recommend these two resources, preferably in this order for someone totally new to assembly: NAND to Tetris, a course that will have you build an emulated general-purpose CPU from first principles even with no prior knowledge. You'll learn exactly about registers and memory by making them. I even recommend this to non-hardware people because the way they divide each layer of complexity is great practice even in software. https://www.coursera.org/learn/build-a-computer https://www.coursera.org/learn/build-a-computer Microcorruption, a series of incrementally difficult MSP430 (an easy-to-understand 16-bit instruction set) exploitation exercises in the browser: https://microcorruption.com https://microcorruption.com These are both geared towards being a gentle introduction to assembly and CPU architecture principles. They don't touch certain facts of X86/64 processors like pipelining or variable-length instructions, but IMO those are best left until you're comfortable with the basics.

retsibsi 7y ago
> NAND to Tetris The book version is also great, and suitable for self-study if you prefer to learn that way: https://www.nand2tetris.org/book https://www.nand2tetris.org/book
boneitis 7y ago
Little warning, Microcorruption may be no longer monitored at this time. Account registration is not automated. A hacker I closely follow tried to play Microcorruption during a Twitch broadcast, and, to my great disappointment, he was unable to due to lack of response.
- vervus 7y ago
  Luckily their "Hall of Fame" is open for anyone to see. And some of the accounts in there are pretty obvious junk accounts with the usual junk passwords. Would probably take like 5 tries to "brute force" your way in, which given the context of the site would even seem fair game.
  - boneitis 7y ago
    I agree that just about nobody would care in spirit. It should probably at least be explicitly noted by anyone considering doing so: I'm sure that's still super illegal.
    - tripzilch 7y ago
      .. in the United States
      - boneitis 7y ago
        That's fair. In any case, I should probably write here that I have since tested account creation with another email and received the activation link right away.
barbecue_sauce 7y ago
I also recommend Xeno Kovah's OpenSecurityTraining courses on YouTube, some of which are specifically dedicated to assembly. The audio quality can sometimes be pretty bad, but the information is good. Though they try to obfuscate things a little bit, these are clearly workshops given to researchers at Mitre, the CVE project maintainer.
- vips7L 7y ago
  http://opensecuritytraining.info/ http://opensecuritytraining.info/ For those interested.

retsibsi 7y ago

> NAND to Tetris The book version is also great, and suitable for self-study if you prefer to learn that way: https://www.nand2tetris.org/book https://www.nand2tetris.org/book

boneitis 7y ago

Little warning, Microcorruption may be no longer monitored at this time. Account registration is not automated. A hacker I closely follow tried to play Microcorruption during a Twitch broadcast, and, to my great disappointment, he was unable to due to lack of response.

vervus 7y ago
Luckily their "Hall of Fame" is open for anyone to see. And some of the accounts in there are pretty obvious junk accounts with the usual junk passwords. Would probably take like 5 tries to "brute force" your way in, which given the context of the site would even seem fair game.
- boneitis 7y ago
  I agree that just about nobody would care in spirit. It should probably at least be explicitly noted by anyone considering doing so: I'm sure that's still super illegal.
  - tripzilch 7y ago
    .. in the United States
    - boneitis 7y ago
      That's fair. In any case, I should probably write here that I have since tested account creation with another email and received the activation link right away.

barbecue_sauce 7y ago

I also recommend Xeno Kovah's OpenSecurityTraining courses on YouTube, some of which are specifically dedicated to assembly. The audio quality can sometimes be pretty bad, but the information is good. Though they try to obfuscate things a little bit, these are clearly workshops given to researchers at Mitre, the CVE project maintainer.

vips7L 7y ago
http://opensecuritytraining.info/ http://opensecuritytraining.info/ For those interested.