OpenSecurityTraining2
Access and status
Cost
Partly free
Part of it is free and part is not. The entry says which part; read that before you plan around it.
Status
Current
Current as at the verification date below. Standards and tools both move — confirm at source before you rely on it.
What it is
An Open edX platform hosting long-form, university-length classes in low-level computing: x86-64 assembly, OS internals, firmware and UEFI, debuggers (WinDbg, GDB, IDA, Ghidra, Binary Ninja, HyperDbg), reverse engineering, vulnerability classes, exploitation, fuzzing, trusted computing and Bluetooth security. Actively maintained — 2025 additions include AFL++ fuzzing, Bluetooth reconnaissance and TPM programming in Python, with an introductory emulator course listed for 2026.
Who it is for, and when
This is the deepest free-to-audit-style material available for the reverse-engineering and firmware end of forensics, where commercial training barely exists. If you need to explain what a malware sample actually does, or to read a driver or bootloader, these classes go further than any DFIR course will.
What it does not cover
The site publishes no price or checkout page and I could not confirm a cost statement either way, so treat the free status as unverified until you see it at registration. Content-wise it is systems and reverse engineering, not forensics: no imaging, no chain of custody, no mobile, no evidentiary or legal material, and the courses assume real C and assembly ability.
Go to the source
Open at p.ost2.fyi (opens in a new tab)https://p.ost2.fyi/
Details
- Type
- Free training
- Written for
- AdvancedAdvanced
- Topics
- free-training, reverse-engineering, malware, windows, linux
- Checked at source
Related entries
The Volatility Foundation keeps the Volatility Framework — currently Volatility 3 — free and open source on GitHub, with the accompanying project documentation. Separately it endorses instructor-led memory forensics courses; the Foundation's site does not publish prices for those, and the Malware and Memory Forensics class is a commercial offering run through memoryanalysis.net.
Binary analysis from the format upward on Linux: ELF and PE structure, writing a loader with libbfd, how disassembly actually works and where it goes wrong, ELF code injection, then binary instrumentation with Pin, dynamic taint analysis with libdft, and symbolic execution with Triton.
A course in Windows malware analysis built around sixty-odd labs with real samples: safe lab construction, static and dynamic analysis, x86 disassembly, debugging, packing and obfuscation, anti-disassembly and anti-VM tricks, and shellcode.
Memory acquisition and analysis across Windows, Linux and macOS, written by the people who built Volatility: process and kernel structures, code injection, rootkit detection, registry and event logs recovered from RAM, the GUI subsystem, network state, and case studies.
Volatility 3
FreeAn open-source memory analysis framework that parses RAM images into processes, network state, loaded modules, injected code, registry hives resident in memory, and command history. Volatility 3 is the actively developed line; Volatility 2 is legacy and should not be the basis of new work, though its documentation is still used for plugin comparison.