Becoming a Technical Ninja
by gr0k
27 August 2018
Tweet
Some time ago a friend showed me Talos Intelligence Group’s blog post How do I become a Ninja?. It’s a great reference if you are already familiar with exploitation basics, but if you’re just getting started, it doesn’t provide much in the way of direction, which can be super frustrating for someone looking to learn.
I wanted to build a guide from start to finish on how to work through these exercises for someone who’s looking to get into the security field.
When I first read the post, one bullet jumped out at me:
The main thing with technical skills is you don’t need to be a master of any of them, you need to be a master of recalling where the information you need is located.
I’ve lost count of the hours I’ve wasted trying to dig up the solution to a problem I’ve solved before. I wanted to put all my lessons learned in one spot and at the same time provide a resource for those looking to learn how software gets exploited.
You can find my walkthroughs of their recommended training here.