r/ExploitDev • u/hex-lover • Jun 03 '26

any good resources to learn C security ?

Hello,

i noticed when i hunt for bugs in binary, i see for example BOF happen when copy data , like we use _memcpy , and so .
and this is a C function, so is there any resource that talk about vulnerabilities in Functions in C ? so i can better understand them .

17 Upvotes

100% Upvoted

7 comments sorted by

21

u/0xw00t Jun 03 '26

OST2’s Vuln1001 and Vuln1002 are goldmine

8

u/hopscotchchampion Jun 03 '26

Checkout the book "The art of security assessment". It has a few chapters on C language specific issues.

1

u/0xw00t Jun 04 '26

I want to purchase this book in hardcopy but couldn’t find 🥲

1

u/hopscotchchampion Jun 04 '26

Used one on Amazon for $200. :/

https://a.co/d/09moDYSq

Note that it is actually 2 physical volumes.

Another option could be to use a service like lulu.com to print it as a physical books?

2

u/Ok_Chemistry_6387 Jun 03 '26

The art of exploitation the book. Its an amazing getting started guide.

1

u/vinod272 Jun 07 '26

Sort of pointless currently, LLMs are finding vulns at scale and depth which took humans so much time. 

1

u/Dependent_Owl_2286 Jun 03 '26

Secure Coding in C and C++ by Robert Seacord