iiinova — where your digital self keeps evolving

OpenSecurityTraining2

@opensectraining.bsky.social

180 followers 6 following 213 posts

501(c)(3) Nonprofit providing Open Source and Open Access computer security training material. #OST2 re-launched July 2021!

Posts Replies Media

OpenSecurityTraining2 @opensectraining.bsky.social · 28/09/2026

We have posted the YouTube playlist for "Architecture 1901: From Zero to QEMU" by Antonio Nappa @jeppojeps.bsky.social of Fuzz Society. URLs for offline download can be found here: www.youtube.com/playlist?lis... But as always the best experience is at the full class at ost2.fyi/Arch1901.

Architecture 1901: From Zero To QEMU - YouTube

View the full free class with labs etc at https://ost2.fyi/Arch1901 ! This class by Antonio Nappa of Fuzz Society (https://fuzzsociety.org/) builds up your k...

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 28/09/2026

Now it's time for us to make good on our promise to making learning more fun on the site, and to start highlighting all the accomplishments students have achieved and can yet achieve!

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 28/09/2026

Immense thanks to everyone who stepped forward to support #OST2! ❤️ Your generous donations help show that you value providing free high-quality educational material to the world.

OpenSecurityTraining2 @opensectraining.bsky.social · 25/09/2026

We have posted the YouTube playlist for Trusted Computing 1103: Advanced TPM Usage by Dimi Tomov in partnership with the TCG. Now anyone wishing to download the videos for offline viewing can find all their URLs here: www.youtube.com/playlist?lis... But for the full class see ost2.fyi/TC1103

Trusted Computing 1103: Advanced TPM Usage - YouTube

View the full free class at https://ost2.fyi/TC1103 ! This is the epic conclusion to the 3-class TPM series (begun in https://ost2.fyi/TC1101 (~8h) and conti...

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

All of the videos showing our planned gamification updates to the website are now available in this playlist: www.youtube.com/playlist?lis...

OST2 Gamification Support Fundraiser Public Playlist - YouTube

OST2 is fundraising to support the development and deployment of a gamification system on the main learning site! Donate today to help support OST2! https://...

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

Part 2 for devs! UAFs, race conditions, type confusion & info leaks. Real 0day exploit walkthroughs show why "looks unexploitable" are famous last words. Secure Development 1002 ost2.fyi/SecDev1002 by @xenokovah.bsky.social

Secure Development 1002: C-Family Implementation Vulnerabilities 2

Secure Development 1002: C-Family Implementation Vulnerabilities 2

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

In this final video @xenokovah.bsky.social talks about how the gamification system will allow us to recognize other worthwhile achievements outside of the platform, such as speaking at security conferences!

OpenSecurityTraining2 @opensectraining.bsky.social · 21/09/2026

🎮This is the last week of the OST2 gamification fundraiser! If you were waiting to be a last-minute hero, now is the time to swoop in!🕹️ www.every.org/ost2/f/lets-...

OpenSecurityTraining2 @opensectraining.bsky.social · 18/09/2026

The best defense is understanding the offense. Learn to spot and prevent the C/C++ implementation bugs that attackers love to exploit. Secure Development 1001 by @xenokovah.bsky.social at ost2.fyi/SecDev1001

Secure Development 1001: C-Family Implementation Vulnerabilities 1

Secure Development 1001: C-Family Implementation Vulnerabilities 1

OpenSecurityTraining2 @opensectraining.bsky.social · 18/09/2026

🎮Our gamification fundraiser ends next week but we need your support today!🕹️ www.every.org/ost2/f/lets-... In this penultimate video @xenokovah.bsky.social talks about how the gamification will allow us to recognize the ultimate volunteers, the instructors!

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 14/09/2026

I’ve been looking for a way to recognize #OST2 volunteers more publicly, and this will allow them to stand head and shoulders above other OST2 students and claim their rightful place of honor! Only the instructors and potentially hardcore class-completionists will shine brighter!

OpenSecurityTraining2 @opensectraining.bsky.social · 14/09/2026

🎮Our gamification fundraiser ends soon and we need your support!🕹️ www.every.org/ost2/f/lets-... Here @xenokovah.bsky.social talks about how the gamification will allow us to recognize the volunteers who make classes better through beta testing, subtitle correction, graphics contributions, etc!

OpenSecurityTraining2 @opensectraining.bsky.social · 11/09/2026

Build the ultimate Windows kernel debugging setup! Automated VMs, ret-sync with IDA/Ghidra, and source-level kernel debugging. Your exploit lab for Cedric Halbronn's classes awaits! Debuggers 3011: Advanced WinDbg ost2.fyi/Dbg3011

Debuggers 3011: Advanced WinDbg

Debuggers 3011: Advanced WinDbg

OpenSecurityTraining2 @opensectraining.bsky.social · 11/09/2026

🎮In the 6th video in our fundraiser, @XenoKovah talks about how student profiles would become much more useful with gamification!🕹️  🧵

OpenSecurityTraining2 @opensectraining.bsky.social · 07/09/2026

Want to write kernel exploits or analyze malware? You need to understand Windows internals first. Syscalls, IRQL, pools, mitigations & more. Architecture 2821: Windows Kernel Internals 2 by Cedric Halbronn ost2.fyi/Arch2821

Architecture 2821: Windows Kernel Internals 2

Architecture 2821: Windows Kernel Internals 2

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 07/09/2026

I think inter/intra-country leaderboards will drive some fun inter/intra-country competition. E.g. here’s who’s been active on OST2 in the last 30 minutes (it’s currently too-early-to-be-up-o’clock on a holiday in the US ;)). But which country has the TOP students?!

OpenSecurityTraining2 @opensectraining.bsky.social · 07/09/2026

🎮In the 5th video in our gamification fundraiser, @xenokovah.bsky.social talks about how leaderboards will work!🕹️  We will have a bunch of different leaderboards: global for the entire site, per-country, per-class, per-accomplishment, and possibly more!  youtu.be/sJEFw-e1iao

OST2 Gamification Fundraiser: Video 5: Leaderboards

YouTube video by OpenSecurityTraining2

OpenSecurityTraining2 @opensectraining.bsky.social · 04/09/2026

🎮In the 4th video in our gamification fundraiser, @xenokovah.bsky.social talks about how we can track intra-class accomplishments!🕹️   Remember, OST2 isn't a mega-nonprofit, we really do need *your* support to keep the ball rolling! www.every.org/ost2/f/lets-... 🙏

OpenSecurityTraining2 @opensectraining.bsky.social · 31/08/2026

Learn Intel Simics: the full-system simulator that lets you debug *everything*, even firmware. Essential prep for the firmware attack & defense class. Debuggers 1015: Introductory Simics ost2.fyi/Dbg1015

Debuggers 1015: Introductory Simics

Debuggers 1015: Introductory Simics

OpenSecurityTraining2 @opensectraining.bsky.social · 31/08/2026

🎮In this video in our gamification fundraiser @xenokovah.bsky.social talks about how multi-class completion accomplishments will work!🕹️ We super appreciate everyone who's donated thus far, but we need everyone who can to show their support for #OST2! www.every.org/ost2/f/lets-... 🙏

OpenSecurityTraining2 @opensectraining.bsky.social · 28/08/2026

🎮For the next video in our gamification fundraiser let's talk about how per-class completion accomplishments will work!🕹️ youtu.be/DnffPQQo2QQ Please support OST2 if you can! 🙏 www.every.org/ost2/f/lets-...

OST2 Gamification Fundraiser: Video 2: Class-Completion Accomplishments

YouTube video by OpenSecurityTraining2

OpenSecurityTraining2 @opensectraining.bsky.social · 26/08/2026

Note that www.every.org/ost2/f/lets-... supports crypto donations in case you've got some crypto burning a hole in your wallet ;)

OpenSecurityTraining2 @opensectraining.bsky.social · 23/08/2026

🎮We're running a 1-month fundraiser and need your support to gamify OST2!🕹️ www.youtube.com/watch?v=hu46... Check out the above video for our plans, and then please donate here to support this effort: www.every.org/ost2/f/lets-...   More videos with more details coming all this month!

OST2 Gamification Fundraiser: Video 1: Gamification Overview

YouTube video by OpenSecurityTraining2

OpenSecurityTraining2 @opensectraining.bsky.social · 27/07/2026

Sniff the airwaves! Learn BT recon with Blue2thprinting; identify devices, detect known vulns & crowdsource data via BTIDALPOOL. Bluetooth 2222: Bluetooth Reconnaissance with Blue2thprinting by @xenokovah.bsky.social ost2.fyi/BT2222 (~8.5 hrs)

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 20/07/2026

As a DEFCON speaker I get some extra human badges to give away. I’d like to give them to HS/College students who are also #OST2 students. Email me at Xeno at ost2.fyi with a pointer to your OST2 username and proof you’re a student. Most completed OST2 classes wins

Reposted by OpenSecurityTraining2

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary 🎉 Check out #OST2_5th_Anniversary to join our celebration and see what happened this past year!

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 OST2 is made possible by instructors who want to help other security engineers learn skills faster. So what we'd really like to see for this coming year are more instructors teaching more diverse topic areas. If you 🫵 have an idea for a class, reach out at teach at ost2.fyi!

OpenSecurityTraining2

Free, deep-dive computer security training: x86 and RISC-V assembly, reverse engineering, exploitation, firmware, debuggers, and trusted computing. All course materials are open-source under Creative...

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 So what can we look forward to this coming 6th year of #OST2's existence? 👇

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 And finally, thanks to all 37k+ folks who are taking classes at OST2! We had our biggest year yet, adding 8k+ students! Teaching thousands of people at a time how to become better hackers, better engineers, better toolsmiths, and better explorers is why we do what we do!

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 We're also going to be running a fundraising push for gamification of the OST2 site with many more details dropping soon. If you want to support that effort you can be an early supporter here: www.every.org/ost2/f/lets-...

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 We're committed to using individual donors' funds to always directly pass through to instructors (never for overhead costs), and we'll once again be passing through your thanks to the current instructors as an honorarium this year. ost2.fyi/Donate-Money...

OpenSecurityTraining2 - Donate Money

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Thanks to everyone who's donated individually to OST2 this past year! ost2.fyi/Donate-Money...  Whether with corporate matching through work (we are a US charity after all) or individually through the YouTube page, donations shows us that you truly value what we do!

OpenSecurityTraining2 - Donate Money

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 OST2 needs more sponsors to keep growing! ost2.fyi/Sponsorship.... If you want your company to sponsor #OST2, reach out via email at "sponsor at ost2.fyi". It's much more cost effective than sponsoring conferences, and reaches far more people!

OpenSecurityTraining2 - Sponsorship

000

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Sponsors like NCC Group @nccgroupinfosec.bsky.social , 3mdeb, and Dark Mentor @darkmentor.com are "donors in kind" who have funded their employees to make classes for OST2!

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Returning sponsor Cyber5W @cyber5w.bsky.social ost2.fyi/Sponsor_Cybe... has continued to be a stalwart🥉Bronze Sponsor!

Sponsor: Cyber5W, Short URL Redirect

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 AMI ost2.fyi/Sponsor_AMI which is an Independent BIOS Vendor (IBV) has seen the value of using OST2's Secure Development training ost2.fyi/SecDev1001 & ost2.fyi/SecDev1002 to help their programmers write more secure code, and became a new 🥇Gold Sponsor this past year!

Sponsor: AMI, Short URL Redirect

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Hex-Rays ost2.fyi/Sponsor_HexR... of IDA Pro fame saw the great "Debuggers 1101: Introductory IDA" course made by Christina Johns @bitmaize.bsky.social and became a new 🥇Gold Sponsor this past year!

Sponsor: Hex-Rays, Short URL Redirect

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Returning 🥇Gold Sponsor @binarly.bsky.social ost2.fyi/Sponsor_Bina... increased their sponsorship this year, by also sponsoring the Firmware Security Learning Path! ost2.fyi/FWSEC_LP_pdf

Sponsor: Binarly, Short URL Redirect

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 Partners and Sponsors provide us with funds to help with overhead costs such as running the site, paying video editors, etc, so that individual donations always go directly to instructors to show them your support.

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉  If you want to see more classes created faster, have your company reach out about Partnering with OST2 like the TCG did! ost2.fyi/Partnership....

OpenSecurityTraining2 - Partnership

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 We also want to thank our Partner the Trusted Computing Group (TCG), who helped us directly fund the creation of new Trusted Computing classes TC1101-TC1103 & TC2202.

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 We want to thank *all* of our instructors who delivered class in any year, because without them OST2 wouldn't be possible! And we want to encourage YOU 🫵 to become the next great OST2 instructor!

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 ost2.fyi/TC2202 On July 14th 2025 Bill Roberts released "Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries" (15h54m avg, 12h50m median, 8h36m to 39h30m range)

Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries

Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 ost2.fyi/BT2222 On Sept 8th Xeno Kovah @xenokovah.bsky.social released "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (9h5m avg, 7h28m median, 3h50m to 25h16m range)

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 ost2.fyi/TC1103  On March 16th Dimi Tomov of tpm.dev released "Advanced Trusted Platform Module (TPM) usage" (10h26m avg, 12h42m median, 5h38m to 20h55m range)

Trusted Computing 1103: Advanced Trusted Platform Module (TPM) usage

Trusted Computing 1103: Advanced Trusted Platform Module (TPM) usage

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary🎉 ost2.fyi/Arch1901  Our most recent class was released just last week by Antonio Nappa @jeppojeps.bsky.social of Fuzz Society! "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" (8h30m avg, 7h10m median, 3h24m to 18h52m range)

Architecture 1901: From zero to QEMU

Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!

OpenSecurityTraining2 @opensectraining.bsky.social · 17/07/2026

🥳 #OST2_5th_Anniversary 🎉 Check out #OST2_5th_Anniversary to join our celebration and see what happened this past year!

Reposted by OpenSecurityTraining2

Xeno Kovah @xenokovah.bsky.social · 11/07/2026

After taking this class and understanding more about how QEMU works, I'm looking forward to throwing LLMs at the often painstaking work necessary for re-hosting firmware to run in an emulator like QEMU.

OpenSecurityTraining2 @opensectraining.bsky.social · 13/07/2026

Go deeper with TPMs! Machine identity, attestation, PCRs, and extended authorization policies. Build on TC1101 to master platform security. "Trusted Computing 1102: Intermediate TPM Usage" ost2.fyi/TC1102 (~10 hrs) by Dimi Tomov

Trusted Computing 1102: Intermediate Trusted Platform Module (TPM) usage

Trusted Computing 1102: Intermediate Trusted Platform Module (TPM) usage

OpenSecurityTraining2 @opensectraining.bsky.social · 06/07/2026

📣"Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" by Antonio Nappa @jeppojeps.bsky.social is released!📣 ost2.fyi/Arch1901

Architecture 1901: From zero to QEMU

Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!