#OST2

Sponsors help cover the costs of keeping #OST2 free for everyone and helping us grow. Thanks to AMI for joining the cause!

We are happy to announce that AMI has become a 🥇Gold-level sponsor of #OST2!

Learn about their work creating firmware across the industry here: ost2.fyi/Sponsor_AMI_SM

We're always looking for more sponsors for #OST2! If your company wants to support creating better security engineers everywhere in the world, get in touch!

A sincere thank you to everyone who donated to #OST2 as an individual in 2025(especially those who used corporate non-profit donation matching)! Your donations go directly to instructors as an honorarium, and show them that you value what they do for OST2 and you want them to keep helping the world!

#OST2 has a ton of material that's relevant to RE. And our ost2.fyi/Dbg1101 introduction to IDA as a debugger class instructor, Christina Johns, is working on the "Reverse Engineering 2001: Introductory Static Analysis of C-based programs" class, which will unlock opportunities for many new classes!

We are happy to announce that Hex-Rays @hex-rays.bsky.social, makers of IDA, have become a 🥇Gold-level sponsor of #OST2!

Learn all the latest about their software reverse engineering tools here: ost2.fyi/Sponsor_HexR...

And I got to meet #OST2 instructor Sina Karvandi (of HyperDbg fame -> ost2.fyi/Dbg3301) in person for the first time, as he's doing a PhD there.

This year @binarly.bsky.social has also expanded their sponsorship to the creation of a new #OST2 Firmware Security Learning Path!

ost2.fyi/OST2_LP_FWSE...

We are happy to announce that @binarly.bsky.social has renewed their 🥇Gold-level sponsorship of #OST2!

Learn more about what they do in firmware & supply chain security here: ost2.fyi/Sponsor_Bina...

🧵For those who are curious about the completion time distribution during the beta of my #OST2 BT2222 class, here it is. The average completion time was 8h25m, the median was 8h10m, the min was 3h50m, and the max was 15h22m

a free workshop (hardwear.io/netherlands-...) (where you get to borrow some of my hardware to get a taste of my free 1-day #OST2 class ost2.fyi/BT2222)…

🧵I made a structural update to the Blue2thprinting #OST2 class today: The previous class was structured like "A:B:[C:D:E]:F:G" where F & G were collecting your own data, and [C-E] were understanding what Tell_Me_Everything.py was trying to tell you about the analyzed data…

The "Trusted Computing 1102: Intermediate Trusted Platform Module (TPM) usage" ost2.fyi/TC2202 class release has updated 3 #OST2 learning paths

Secure Software Design & Implementation - ost2.fyi/OST2_LP_SecD...

System Security - ost2.fyi/OST2_LP_SysS...

Windows Security - ost2.fyi/OST2_LP_Wind...

FWIW it's vaguely possible I'll eventually turn my lessons learned here into a #OST2 5000-level RE class (after I get some more important and prerequisite classes like BT Classic done)

Fall and Winter Binary Ninja trainings are here! Automated Reverse Engineering goes online this October for the first time in years, so be sure to register before the month ends. Firmware debuts at RE//verse 2026 and a free Intro to Binja with #OST2 is now live. For details: binary.ninja/training

Cyber Skills Academy - Knowledge and training The Cyber Skills Academy will foster knowledge generation through education and training by establishing a common EU approach to cybersecurity training

If anyone from the EU would be interested in helping get #OST2 classes added to digital-skills-jobs.europa.eu/en/cyber-ski..., please reach out

SEC-T ConferenceSeptember 11-12 The main conference is two days of IT security presentations. Talks are highly technical and research-driven, not sales pitches. Tickets Community EventSeptember 10 The half-...

I'm happy to say that my talk on Blue2thprinting v2 (now with ∞% more crowdsourcing!) has been accepted to SEC-T sec-t.org in Stockholm next month. The nice thing is that by the time the talk happens, the Blue2thprinting #OST2 class will be released.

All the videos for this are already recorded and with the editor. My ask is that folks buy the Bluetooth RX/TX hardware needed for the class now, so that they’re ready to roll when the beta opens. The hardware will be reused in future #OST2 BT classes too.

OpenSecurityTraining2 - Sponsorship

But we need more sponsors to keep growing! ost2.fyi/Sponsorship.... If you want your company to sponsor #OST2, reach out via email at "sponsor at ost2.fyi". It's much more cost effective than sponsoring conferences, and reaches far more people!

It's time to celebrate #OST2's 4th anniversary!
So what happened this last year at #OST2? Let's take a walk down memory hierarchy lane!
👇

Architecture 1001 Short URL Redirect

Like all current #OST2 classes, the core content is made fully public, and you only need to register if you want to post to the discussion board or track your class progress. This mini-class takes approximately 2 hours to complete.

OST Testimonials: How has OST1 or OST2 helped you? Some people assume that because OST releases material for free, that it's not high quality. We need to help more people learn by assuring them that what they will learn will have value to them in their lives and in their jobs. By sharing your stories of how OST has helped your career, you will help others improve their skills and careers as well. We will pick impactful stories and share them via our website and social media. (This is why we'd ask that you submit your real name, rather than a handle, so that people can tie your accomplishment to your real work.)

Some people assume that because OST releases material for free, that it's not high quality. We need to show them that's not the case, by highlighting how it has helped real engineers. If #OST2 has helped your career, please tell us how, here:
forms.gle/LMKE7Evhu6vL...

We're happy to announce that @cyber5w.bsky.social is renewing their sponsorship of #OST2 at the Bronze🥉 level in 2025!
Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...

Oh, and at some point I will update all the #OST2 Learning Paths to try and start using this new coloring/annotation convention to show average class completion times and programming language knowledge requirements, if any

Sneak peek at the draft #OST2 Bluetooth Security Learning Path! If you want to beta test the BT3001 class, you’re highly encouraged to finish ost2.fyi/Vulns1001 & ost2.fyi/Vulns1002 ASAP!

This is a bit of a fraught question (in that I’m expecting to attract spam…), but I’m interested in making an account to allow #OST2 to accept donations in cryptocurrency. Any recommendations on what I should use?

Now that I’ve got the timeline updates off my plate (and once my taxes are done 👀), I can get back to working on the #OST2 Blue2thprinting class!

OST2 - Cohort OpenSecurityTraining2 Written By: Hussein Muhaisen & Xeno Kovah Security Researcher Cohort 1, 2025 Weeks 1 & 2 Architecture 1001: x86-64 Assembly (~28 hours, not including binary bomb lab) https:...

The #OST2 Discord channel will be running an event starting Dec 30th, organized by @husseinmuhaisen.bsky.social, where students can join a cohort which will be going through OST2 classes from Intro level to Advanced, together, over ~8 weeks. The cohort agenda is here: docs.google.com/document/d/1...

Course |

Just added 7 CVEs found by @sploitem to the 🏆 Student CVE Trophy Case 🏆 in #OST2 Vulnerabilities 1001/2 classes
SBO - apps.p.ost2.fyi/learning/cou...
HBO - apps.p.ost2.fyi/learning/cou...
…

I had a good chat with the @binary.ninja folks a while back, and they’ve agreed to create a “Debuggers 1103: Introductory Binary Ninja” class like the #OST2 Dbg1101/2 IDA/Ghidra classes, for use in the Arch1001 assembly class to tackle the binary bomb lab. Looking forward to it!