OpenSecurityTraining2

Final call for beta testers! The class will begin later today!

We are happy to announce that AMI has become a 🥇Gold-level sponsor of #OST2!

Learn about their work creating firmware across the industry here: ost2.fyi/Sponsor_AMI_SM

Our Trusted Computing "Advanced TPM usage" class will begin this week. Sign up below.

- Advanced TPM Policy usage using tpm2-tools and tpm2-tss
- Policy using locality
- Policy using the TPM clock and reset
- Policy using the TPM's internal NVRAM
- Handling external keys using a TPM

The topics for TC1103 are:
- Introduction to the Feature API (FAPI)
- Creating keys using FAPI
- Policy using FAPI
- Full-disk encryption primitive (FDE) using a TPM
- TPM operations for FDE
...

🧵Like TC1101 & TC1102, TC1103 has the goal of helping developers get bootstrapped on using TPMs more quickly than if they were to just rely on reading the spec or API documents alone.

TC1103: Advanced TPM Usage Beta Testing Pre-Class Survey TC1103 will take approximately 7 hours to complete, and will begin January 16th, and end February 13th. TC1103 is the follow up to TC1101 Intro TPM usage (https://ost2.fyi/TC1101) & TC1102 Intermedia...

📢Call for beta testers!📢
forms.gle/9QgwVSstXi7n...

The beta for Trusted Computing 1103: Advanced TPM Usage will start Jan 16th. It will take ~7 hours to complete. Sign up above if you're interested in participating. (Note: ost2.fyi/TC1101 & ost2.fyi/TC1102 are strongly recommended prerequisites.)

In 2026 we will be fundraising to add a gamification plugin to our Open edX servers. This will add a leaderboard for learners, and provide a new way to track your sub-class-granularity skills that you're picking up on the site. To help early, donate here: www.every.org/ost2/f/lets-...

We're always looking for more sponsors for #OST2! If your company wants to support creating better security engineers everywhere in the world, get in touch!

We've got a decent number of instructors in the queue to create new classes in 2026 too, but we can always use more! Classes are a significant investment of time, but they also pay off in a significant way for the number of people you will help over many years!

#OST2 has a ton of material that's relevant to RE. And our ost2.fyi/Dbg1101 introduction to IDA as a debugger class instructor, Christina Johns, is working on the "Reverse Engineering 2001: Introductory Static Analysis of C-based programs" class, which will unlock opportunities for many new classes!

* Xeno Kovah - Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting - ost2.fyi/BT2222

If you've got an idea for a class that you want to share with 33k friends, reach out at teach 🌀 ost2.fyi!

* Bill Roberts - Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries - ost2.fyi/TC2202

...

* Xusheng Li - Debuggers 1103: Introductory Binary Ninja - ost2.fyi/Dbg1103
...

🧵A special thanks to the instructors who stepped up in 2025 to release new classes:

* Francesco Pollicino - Fuzzing 1001: Introductory white-box fuzzing with AFL++ - ost2.fyi/Fuzz1001

...

and Bronze Sponsor Cyber5W @cyber5w.bsky.social, all of whom help keep the servers running, and contribute towards instructor honorariums.

And also thanks to our Gold Sponsors, 3mdeb, Binarly @binarly.bsky.social, Dark Mentor @darkmentor.com, Hex-Rays @hex-rays.bsky.social, NCCGroup @nccgroupinfosec.bsky.social ...

We also want to give another shout-out to our Partner, Trusted Computing Group for helping to fund classes about how to build secure systems.

A sincere thank you to everyone who donated to #OST2 as an individual in 2025(especially those who used corporate non-profit donation matching)! Your donations go directly to instructors as an honorarium, and show them that you value what they do for OST2 and you want them to keep helping the world!

We are happy to announce that Hex-Rays @hex-rays.bsky.social, makers of IDA, have become a 🥇Gold-level sponsor of #OST2!

Learn all the latest about their software reverse engineering tools here: ost2.fyi/Sponsor_HexR...

While we've had an overwhelming turn out in registration for this class, we still wanted to remind people that there's still time to sign up; since our beta classes are when the instructor is actively watching the forums and responding to feedback.

Periodic call for volunteers: We're looking for classes on Apple ecosystem security. E.g. OS internals, binary formats, malware analysis, vulnerability hunting, etc. If you're interested in sharing what you know, reach out at teach🌀ost2.fyi

By the end, you’ll not only understand how emulators work—you’ll be able to build, modify, and analyze them for research, debugging, and vulnerability discovery.

The course combines hands-on labs, in-browser exercises, and conceptual lectures to bridge theory and practice, preparing students to tackle topics such as system emulation, hardware-assisted execution, and fuzzing of embedded targets.

You will start by understanding what emulation truly means—how software can imitate hardware—and progressively build your own 8-bit CPU emulator in Python (SimpleProc-8), extend it with interrupts, I/O, and MMIO, and finally instrument real-world emulators like QEMU.

This course explores the fascinating world of emulation, guiding learners from the fundamentals of CPU design to the internals of QEMU and advanced instrumentation techniques.

Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up! Enter the email you have used / will use when registering for beta.ost2.fyi. This will be used to enroll you in the beta class if you are selected. If your account does not exist at the time enrollmen...

📢Call for beta testers!📢
The "Architecture 1901: From zero to QEMU - A Gentle introduction to emulators from the ground up!" course by Antonio Nappa @jeppojeps.bsky.social will begin November 28th. Sign up here: forms.gle/LUXaThn4YSYS...

This captures current and future plans for classes involving security in the deep-dark of firmware! But Binarly is starting to give visibility into what's going on there with their binary analysis platform.

This year @binarly.bsky.social has also expanded their sponsorship to the creation of a new #OST2 Firmware Security Learning Path!

ost2.fyi/OST2_LP_FWSE...

We are happy to announce that @binarly.bsky.social has renewed their 🥇Gold-level sponsorship of #OST2!

Learn more about what they do in firmware & supply chain security here: ost2.fyi/Sponsor_Bina...