
A collection of vulnerable ARM binaries designed for educational exploit development and vulnerability research practice across different architectures and exploitation techniques.
Checked October 2026.
Exploit-Challenges is a collection of vulnerable ARM binaries designed for educational purposes in vulnerability research and exploit development. The collection includes multiple challenge levels targeting different exploitation techniques and architectures.
The ARM 32-bit challenges cover Return Oriented Programming (ROP) fundamentals through seven progressive levels. These range from basic ROP introduction to advanced techniques including ASLR bypass, format string vulnerabilities, stack pivoting, and off-by-one vulnerabilities. The heap-based challenges focus on common memory corruption issues including heap overflow, Use-After-Free, and double free vulnerabilities.
ARM 64-bit challenges provide 64-bit versions of select ROP exercises, allowing practitioners to understand architectural differences in exploitation techniques.
All binaries are built as ARMv7 Mach-O executables and are designed for use on 32-bit jailbroken iOS devices with debugging utilities like radare2. The challenges include accompanying write-ups and explanations available through the creator's educational content.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Exploit-Challenges: features, pricing and alternatives.
Exploit-Challenges is a product in the Cyber Range Training category. It covers Vulnerability Research, CTF and Education.
Exploit-Challenges is free. Download and setup instructions are at https://github.com/Billy-Ellis/Exploit-Challenges/.
Alternatives to Exploit-Challenges listed on CybersecTools:
Compare all Exploit-Challenges alternatives at https://cybersectools.com/alternatives/exploit-challenges
Exploit-Challenges is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
echoCTF is a cybersecurity framework for running Capture the Flag competitions and training exercises on real IT infrastructure.
CTF platform providing hands-on cybersecurity training and competition challenges
A deliberately vulnerable ARM/ARM64 application with 14 different vulnerability levels designed for CTF-style exploitation training and education.
FBCTF is a platform for hosting Jeopardy and King of the Hill style Capture the Flag competitions with support for various scales and participation models.
Integrated platform for cyber operations talent mgmt, training & assessment
Subscription-based cybersecurity lab platform with hands-on hackable instances.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI