OpenSecurityTraining2

If you, like me, are curious about the thousands of BT devices that are secretly making noise around us every day (and whether they’re vulnerable to exploitation), then this is the class for you. You can register here: forms.gle/MncQkVAL8Laq...

The videos came back early so the class has begun early! As a reminder, betas are perhaps the best time to participate, because it’s the only time I’m actively checking the forums multiple times per day and quickly fixing material if needed

It will take ~8-12 hours to complete (depending on how long you dig into crowdsourced BT data). This class has no prerequisite knowledge, but it does require purchasing at least $64 worth of hardware as described in the registration form above

📢Call for beta testers!📢
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...

And finally, thanks to all 29k+ folks who are taking classes at OST2! Being able to teach thousands of people at a time how to become better hackers, better engineers, better toolsmiths, and better explorers is why we do what we do! Spread the word and let's make more awesome people!

We're committed to using individual donors' funds to always directly pass through to instructors (never for overhead costs), and we'll once again be passing through your thanks to the current instructors as an honorarium this coming year.
ost2.fyi/Donate-Money...

Thanks to everyone who's donated individually to OST2 this past year! Whether with corporate matching through work (we are an actual charity registered in the US after all) or individually through the YouTube page, donations shows us that you truly value what we do!

But we need more sponsors to keep growing! ost2.fyi/Sponsorship.... If you want your company to sponsor #OST2, reach out via email at "sponsor at ost2.fyi". It's much more cost effective than sponsoring conferences, and reaches far more people!

Other sponsors like @nccgroupinfosec.bsky.social , 3mdeb, and @darkmentor.com are "donors in kind" who fund their employees making classes for OST2

Sponsors like Winsider ost2.fyi/Sponsor_Wins..., Binarly ost2.fyi/Sponsor_Bina..., and @cyber5w.bsky.social ost2.fyi/Sponsor_Cybe... provide us with funds to help with overhead costs such as running the site, paying video editors, etc.

We also want to thank our partners like the Trusted Computing Group, who help us directly fund the creation of new classes like TC2202 (currently in beta) and TC1103 (targeting early 2026.)

We're happy to say that we were able to pay our first honorariums to instructors last year, funded by your donations (ost2.fyi/Donate-Money...), and Partners & Sponsors contributions.

We want to of course thank all of our instructors who delivered class this past year, or in previous years. Because without them OST2 wouldn't be possible!

YouTube video by OpenSecurityTraining2 Introduction to Trusted Platform Modules (TPMs) TC1101 Lecture B 2

with an additional 27m video requested by students, comparing and contrasting TPMs to other trusted computing technologies like smart cards: www.youtube.com/watch?v=51I9...

And on Oct 1st. we also posted an updated version of Dimi's ost2.fyi/TC1101 "Introductory Trusted Platform Module (TPM) usage" class (8h34m median, 9h55.5m average, 2h54m to 44h36m range)...

This class built on the earlier Introductory TPM class ost2.fyi/TC1101, and deepens students' capability to program and interact with the TPM in C, covering things like the Endorsement Hierarchy and the Endorsement Key, and machine identity and TPM based identification.

TPM.Dev Our community is about sharing knowledge and resources for developers who want to integrate better security into their projects. Everyone is welcomed, from enthusiasts to professionals. Adding Hardwar...

On Oct 4th Dimi Tomov of tpm.dev provided ost2.fyi/TC1102 "Intermediate Trusted Platform Module (TPM) usage" (10h5m median, 12h0m average, 4h13m to 50h4m range)

It also provides necessary background about IDA UI usage for Gal Zaban's ost2.fyi/RE3011 Reversing C++ Binaries class.

This mini-class is integrated into @xenokovah.bsky.social's Arch1001: x86-64 assembly class ost2.fyi/Arch1001 so students can learn a tool like IDA at the same time they're learning assembly and reverse engineering in the final binary bomb lab.

On Oct 14th Christina Johns @bitmaize released "Debuggers 1101: Introductory IDA" ost2.fyi/Dbg1101 (1h37m average, 1h26m median, 0h34m to 3h45m range).

This class is great for both vulnerability hunters who've already taken @xenokovah.bsky.social's ost2.fyi/Vulns1001 & ost2.fyi/Vulns1002, or developers who've taken the equivalent secure development classes ost2.fyi/SecDev1001 & ost2.fyi/SecDev1002.

On June 29th Francesco Pollicino released "Fuzzing 1001: Introductory white-box fuzzing with AFL++" ost2.fyi/Fuzz1001 (7h57m average, 6h57m median, 2h22m to 40h0m range)

But can also be taken as a standalone class for those who already know other tools like gdb, windbg, IDA, or Ghidra, and want to learn Binja's interface

Released just last week by Xusheng Li of @binaryninja.bsky.social
ost2.fyi/Dbg1103 - Debuggers 1103: Introductory Binary Ninja - (1h53m average, 1h19m median, 0h20m to 11h45m range) is a mini-class that is integrated into @xenokovah.bsky.social's Arch1001: x86-64 assembly class ost2.fyi/Arch1001

It's time to celebrate #OST2's 4th anniversary!
So what happened this last year at #OST2? Let's take a walk down memory hierarchy lane!
👇

"Trusted Computing 2202: TPM 2.0 Programming using Python and the tpm2-pytss libraries" Pre-Class Survey TC2202 builds on top of TC1101 (https://ost2.fyi/TC1101) & TC1102 (https://ost2.fyi/TC1101), but involves interacting with TPMs via Python instead of e.g. C/C++. It will cover the following material i...

What if instead of taking Microsoft or an anti-DRM advocate's word for what TPMs can and can't do, you went and learned about it yourself? The beta class teaching you how to talk to TPMs in Python starts today! Register here by EoD to join: forms.gle/YydoqnG34qZM...

The class can be used as standalone cross-training for people who know other reverse engineering tools, or by students learning assembly for the first time in the ost2.fyi/Arch1001 x86-64 Assembly class.

Like all current #OST2 classes, the core content is made fully public, and you only need to register if you want to post to the discussion board or track your class progress. This mini-class takes approximately 2 hours to complete.

📣"Debuggers 1103: Introductory Binary Ninja" is released!📣
ost2.fyi/Dbg1103

This class by Xusheng Li of Vector 35 @binary.ninja provides students with a hands-on introduction to the free version of Binja as a debugger, thus providing decompilation support!

Got any other examples of companies adding references to OST2 in their hiring? Let us know!