https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts 
https://mirror1.malwaredomains.com/files/justdomains 
http://sysctl.org/cameleon/hosts 
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist 
https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt 
https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt 
https://hosts-file.net/ad_servers.txt

These are the ones I've been collecting so far:

http://winhelp2002.mvps.org/hosts.txthttps://adaway.org/hosts.txthttps://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txthttps://dnsbl.karelvanhecke.com/adg-ad.txthttps://dnsbl.karelvanhecke.com/adg-mobile.txthttps://dnsbl.karelvanhecke.com/adg-spyware.txthttps://dnsbl.karelvanhecke.com/airelle-ads.txthttps://dnsbl.karelvanhecke.com/airelle-mal.txthttps://dnsbl.karelvanhecke.com/airelle-trc.txthttps://dnsbl.karelvanhecke.com/c2.txthttps://dnsbl.karelvanhecke.com/dga.txthttps://dnsbl.karelvanhecke.com/easylist.txthttps://dnsbl.karelvanhecke.com/easyprivacy.txthttps://dnsbl.karelvanhecke.com/mwpatrol.txthttps://dnsbl.karelvanhecke.com/openphish.txthttps://dnsbl.karelvanhecke.com/openphish_30d.txthttps://dnsbl.karelvanhecke.com/otx.txthttps://dnsbl.karelvanhecke.com/phishtank.txthttps://dnsbl.karelvanhecke.com/shalla-adv.txthttps://dnsbl.karelvanhecke.com/shalla-spyware.txthttps://dnsbl.karelvanhecke.com/shalla-tracker.txthttps://dnsbl.karelvanhecke.com/urlhaus.txthttps://dnsbl.karelvanhecke.com/ut1-ads.txthttps://dnsbl.karelvanhecke.com/ut1-mal.txthttps://dnsbl.karelvanhecke.com/ut1-phi.txthttps://gist.githubusercontent.com/Perflyst/315f86393712a0c2107ee8eb58c6acee/rawhttps://hosts-file.net/ad_servers.txthttps://hosts-file.net/emd.txthttps://hosts-file.net/exp.txthttps://hosts-file.net/grm.txthttps://hosts-file.net/psh.txthttps://hostsfile.mine.nu/hosts0.txthttps://jasonhill.co.uk/pfsense/ytadblock.txthttps://mirror.cedia.org.ec/malwaredomains/immortal_domains.txthttps://mirror1.malwaredomains.com/files/justdomainshttps://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts;showintro=0https://phishing.army/download/phishing_army_blocklist_extended.txthttps://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txthttps://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txthttps://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/Ads-tracker.txthttps://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/coinminer.txthttps://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/Malware.txthttps://raw.githubusercontent.com/CHEF-KOCH/NSABlocklist/master/HOSTShttps://raw.githubusercontent.com/CHEF-KOCH/WebRTC-tracking/master/WebRTC.txthttps://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txthttps://raw.githubusercontent.com/Dawsey21/Lists/master/main-blacklist.txthttps://raw.githubusercontent.com/deathbybandaid/piholeparser/master/Subscribable-Lists/ParsedBlacklists/AakList.txthttps://raw.githubusercontent.com/deathbybandaid/piholeparser/master/Subscribable-Lists/ParsedBlacklists/Prebake-Obtrusive.txthttps://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txthttps://raw.githubusercontent.com/HorusTeknoloji/TR-PhishingList/master/url-lists.txthttps://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txthttps://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txthttps://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txthttps://raw.githubusercontent.com/vokins/yhosts/master/hostshttps://raw.githubusercontent.com/w13d/adblockListABP-PiHole/master/Spotify.txthttps://reddestdream.github.io/Projects/MinimalHosts/etc/MinimalHostsBlocker/minimalhostshttps://s3.amazonaws.com/lists.disconnect.me/simple_ad.txthttps://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txthttps://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txthttps://smokingwheels.github.io/Pi-hole/allhostshttps://someonewhocares.org/hosts/zero/hostshttps://tspprs.com/dl/abusehttps://tspprs.com/dl/adshttps://tspprs.com/dl/cryptohttps://tspprs.com/dl/drugshttps://tspprs.com/dl/facebookhttps://tspprs.com/dl/fakenewshttps://tspprs.com/dl/fraudhttps://tspprs.com/dl/gamblinghttps://tspprs.com/dl/mainhttps://tspprs.com/dl/malwarehttps://tspprs.com/dl/mischttps://tspprs.com/dl/phishinghttps://tspprs.com/dl/pornhttps://tspprs.com/dl/proxyhttps://tspprs.com/dl/ransomwarehttps://tspprs.com/dl/scamhttps://tspprs.com/dl/spamhttps://tspprs.com/dl/spotifyhttps://tspprs.com/dl/suspicioushttps://tspprs.com/dl/torrenthttps://tspprs.com/dl/trackinghttps://v.firebog.net/hosts/AdguardDNS.txthttps://v.firebog.net/hosts/Airelle-trc.txthttps://v.firebog.net/hosts/BillStearns.txthttps://v.firebog.net/hosts/Easylist.txthttps://v.firebog.net/hosts/Easyprivacy.txthttps://v.firebog.net/hosts/Prigent-Ads.txthttps://v.firebog.net/hosts/Prigent-Malware.txthttps://v.firebog.net/hosts/Prigent-Phishing.txthttps://v.firebog.net/hosts/Shalla-mal.txthttps://v.firebog.net/hosts/static/w3kbl.txthttps://www.dshield.org/feeds/suspiciousdomains_High.txthttps://www.joewein.net/dl/bl/dom-bl-base.txthttps://www.malwaredomainlist.com/hostslist/hosts.txthttps://www.squidblacklist.org/downloads/dg-ads.aclhttps://www.squidblacklist.org/downloads/dg-malicious.aclhttps://zerodot1.gitlab.io/CoinBlockerLists/hostshttps://zerodot1.gitlab.io/CoinBlockerLists/list.txthttps://zerodot1.gitlab.io/CoinBlockerLists/list_browser.txthttps://zerodot1.gitlab.io/CoinBlockerLists/list_optional.txthttps://zeustracker.abuse.ch/blocklist.php?download=domainblocklist```
``

http://winhelp2002.mvps.org/hosts.txt
https://adaway.org/hosts.txt
https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt
https://dnsbl.karelvanhecke.com/adg-ad.txt
https://dnsbl.karelvanhecke.com/adg-mobile.txt
https://dnsbl.karelvanhecke.com/adg-spyware.txt
https://dnsbl.karelvanhecke.com/airelle-ads.txt
https://dnsbl.karelvanhecke.com/airelle-mal.txt
https://dnsbl.karelvanhecke.com/airelle-trc.txt
https://dnsbl.karelvanhecke.com/c2.txt
https://dnsbl.karelvanhecke.com/dga.txt
https://dnsbl.karelvanhecke.com/easylist.txt
https://dnsbl.karelvanhecke.com/easyprivacy.txt
https://dnsbl.karelvanhecke.com/mwpatrol.txt
https://dnsbl.karelvanhecke.com/openphish.txt
https://dnsbl.karelvanhecke.com/openphish_30d.txt
https://dnsbl.karelvanhecke.com/otx.txt
https://dnsbl.karelvanhecke.com/phishtank.txt
https://dnsbl.karelvanhecke.com/shalla-adv.txt
https://dnsbl.karelvanhecke.com/shalla-spyware.txt
https://dnsbl.karelvanhecke.com/shalla-tracker.txt
https://dnsbl.karelvanhecke.com/urlhaus.txt
https://dnsbl.karelvanhecke.com/ut1-ads.txt
https://dnsbl.karelvanhecke.com/ut1-mal.txt
https://dnsbl.karelvanhecke.com/ut1-phi.txt
https://gist.githubusercontent.com/Perflyst/315f86393712a0c2107ee8eb58c6acee/raw
https://hosts-file.net/ad_servers.txt
https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/grm.txt
https://hosts-file.net/psh.txt
https://hostsfile.mine.nu/hosts0.txt
https://jasonhill.co.uk/pfsense/ytadblock.txt
https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt
https://mirror1.malwaredomains.com/files/justdomains
https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts;showintro=0
https://phishing.army/download/phishing_army_blocklist_extended.txt
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
https://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/Ads-tracker.txt
https://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/coinminer.txt
https://raw.githubusercontent.com/CHEF-KOCH/CKs-FilterList/master/HOSTS/Malware.txt
https://raw.githubusercontent.com/CHEF-KOCH/NSABlocklist/master/HOSTS
https://raw.githubusercontent.com/CHEF-KOCH/WebRTC-tracking/master/WebRTC.txt
https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
https://raw.githubusercontent.com/Dawsey21/Lists/master/main-blacklist.txt
https://raw.githubusercontent.com/deathbybandaid/piholeparser/master/Subscribable-Lists/ParsedBlacklists/AakList.txt
https://raw.githubusercontent.com/deathbybandaid/piholeparser/master/Subscribable-Lists/ParsedBlacklists/Prebake-Obtrusive.txt
https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt
https://raw.githubusercontent.com/HorusTeknoloji/TR-PhishingList/master/url-lists.txt
https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt
https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt
https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt
https://raw.githubusercontent.com/vokins/yhosts/master/hosts
https://raw.githubusercontent.com/w13d/adblockListABP-PiHole/master/Spotify.txt
https://reddestdream.github.io/Projects/MinimalHosts/etc/MinimalHostsBlocker/minimalhosts
https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt
https://smokingwheels.github.io/Pi-hole/allhosts
https://someonewhocares.org/hosts/zero/hosts
https://tspprs.com/dl/abuse
https://tspprs.com/dl/ads
https://tspprs.com/dl/crypto
https://tspprs.com/dl/drugs
https://tspprs.com/dl/facebook
https://tspprs.com/dl/fakenews
https://tspprs.com/dl/fraud
https://tspprs.com/dl/gambling
https://tspprs.com/dl/main
https://tspprs.com/dl/malware
https://tspprs.com/dl/misc
https://tspprs.com/dl/phishing
https://tspprs.com/dl/porn
https://tspprs.com/dl/proxy
https://tspprs.com/dl/ransomware
https://tspprs.com/dl/scam
https://tspprs.com/dl/spam
https://tspprs.com/dl/spotify
https://tspprs.com/dl/suspicious
https://tspprs.com/dl/torrent
https://tspprs.com/dl/tracking
https://v.firebog.net/hosts/AdguardDNS.txt
https://v.firebog.net/hosts/Airelle-trc.txt
https://v.firebog.net/hosts/BillStearns.txt
https://v.firebog.net/hosts/Easylist.txt
https://v.firebog.net/hosts/Easyprivacy.txt
https://v.firebog.net/hosts/Prigent-Ads.txt
https://v.firebog.net/hosts/Prigent-Malware.txt
https://v.firebog.net/hosts/Prigent-Phishing.txt
https://v.firebog.net/hosts/Shalla-mal.txt
https://v.firebog.net/hosts/static/w3kbl.txt
https://www.dshield.org/feeds/suspiciousdomains_High.txt
https://www.joewein.net/dl/bl/dom-bl-base.txt
https://www.malwaredomainlist.com/hostslist/hosts.txt
https://www.squidblacklist.org/downloads/dg-ads.acl
https://www.squidblacklist.org/downloads/dg-malicious.acl
https://zerodot1.gitlab.io/CoinBlockerLists/hosts
https://zerodot1.gitlab.io/CoinBlockerLists/list.txt
https://zerodot1.gitlab.io/CoinBlockerLists/list_browser.txt
https://zerodot1.gitlab.io/CoinBlockerLists/list_optional.txt
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist

uMatrix & HOSTS only optional filter lists.

• IPduh
• Robtex
• ZMap - The Internet Scanner
• IP Address Details (ipinfo.io)
• Tracert nsa.gov, see how TRACERT command works
• GlobalLeaks [Open-source anonymous whistleblowing software]
• Freedom Box
• DenyHosts
• Decode Your HTTP Traffic with Open Source Sysdig (sysdig.com)
• Courage Foundation
• shodan.io
• censys.io
• ... others

Anti-DPI (deep package inspection) tools (they don't replace a good VPN!)

• GoodbyeDPI & GUI
• GreenTunnel
• zapret

NSA Resources and public program(s)

• National Security Agency (github.com)
• Ghidra reverse engineering (SRE) framework (nsa.gov) [story]
• NSA public source code repo (code.nsa.gov)

Snowden documents compilations

• The NSA files | The Guardian
• Unofficial page to search E. Snowden leaked documents
• https://edwardsnowden.com/revelations/
• Free Haven's Selected Papers in Anonymity
• GitHub: nsa-observer project
• ACLU NSA Documents Search 2013 Archive
• Free Snowden project
• NSA Spying | Electronic Frontier Foundation
• Introducing a Compendium of the Released NSA Spying Documents by EFF
• LeakSource
• DEBORAH NATSIOS AND JOHN YOUNG BIBLIOGRAPHY
• The NSA Toolbox
• Snowden Surveillance Archive
• Snowden Archive Searchable

Known compromised ISP Providers

• AT&T helped to spy on an array of Internet traffic | The New York Times & via ProPublica
• Telecom US / T-Mobile / Deutsche Telekom
• Vodafone (DNS Hijacking, DPI)
• E-Plus / O2
• Alphabet (Goolgle) 'Project Fi alias T-Com' [Apr. 2015, needs a special Fi SIM for Nexus 6 XT1103 only (atm)]
• Digital Ocean, Inc.s
• TM Net, Internet Service Provider
• REN
• Verizon
• TNG
• Spint
• Sprint
• Unicom (GFW)
• CERNET (GFW)
• Embarq
• Telecom Egypt
• Türk Telekom
• Belgacom
• Tor has a community based good/bad ISP list
• Wind Mobile (DNS Hijacking)
• Wind (DNS Hijacking)
• Ote (DNS Hijacking)
• Hol (DNS Hijacking)
• Forthnet (DNS Hijacking)
• Cyta (DNS Hijacking)
• Cosmote (DNS Hijacking)

Needs more evidence

• Easybell
• L8NT
• Charter
• Suddenlink

ISP which are known to fight for privacy and a free internet

• Bahnhof (Swedish)
• Sonic (US)

Blockchain monitoring

• OAKSTAR (sub-project MONKEYROCKET)
• SHIFTINGSHADOW
• ORANGECRUSH
• YATCHSHOP
• ORANGEBLOSSOM
• SILVERZEPHYR
• BLUEZEPHYR
• COBALTFALCON

Videos

• USENIX Enigma 2016 - NSA TAO Chief on Disrupting Nation State Hackers

• Introduction to Linux – A Hands on Guide
• Bash Beginner Guide
• Linux-Inside : about linux kernel and its internals
• Understading the ELF file
• ELF Binaries on Linux : Understanding & Analysis
• Linux File System Infograph 1 / Infograph 2
• Linux Kernel Analysis – Walkthrough
• Linux Kernel Map
• Linux GLibC Stack Canary Values
• Stack Smashing Protector

1. C Function Calls Convention on the Stack
2. The Anatomy of an Executable
3. Introducing Character Sets & Encoding
4. An Introduction to Writing System & Unicode

• Mother board , Chipsets & Memory Map
• How Computer Boots up
• The Kernel Boot Process
• CPU Rings , Privilege & Protection
• What your computer does while you wait
• Cache : A place for concealment & safe-keeping
• Getting Physical with Memory
• Anatomy of a Program in Memory
• How the Kernel Manages your Memory
• Journey to the Stack – part 1
• Epilogues , Canaries & Buffer Overflows
• Recursion : Dream with a dream

• The Little Book about OS Development
• How to make a Computer Operating System in C++

1. x86 nasm Assembly Quick Reference
2. Intel Pentium Instruction Set
3. Win32 Assembly
4. cgasm – Offline Assembly Documentation
5. x86 Op Code & Instruction Reference
6. Linux System Call Table
7. Linux Sys Call Ref
8. NASM Tutorial

1. Getting Started with windbg ( User mode )
2. Getting Started with windbg ( Kernel mode )
3. Getting Started with windbg #1
4. Getting Started with windbg #2
5. Getting Started with windbg #3
6. GDB Command Reference

1. Debug : The Secret Lives of Debuggers

Rev-Eng

1. Nnamon’s Reverse Engineering & Exploitation Workshop
2. Reverse Engineering Workshop – Sprout 2018
3. Reversing Workshop : Solving Flare-on 2016
4. Reverse Engineering Malware 101 – Malware Unicorn

Exp-Dev

1. Basics
2. Introduction to Stack Overflow
3. Changing offsets & Rebased modules
4. Locating shellcode jump
5. Locating shellcode Egg hunting
6. SEH exploits
7. Unicode Buffer Overflows

1. https://www.corelan.be/index.php/articles/ ( Windows )
2. https://www.corelan.be/index.php/forum/exploit-writing-tutorials-linux/ ( Linux )

1. Classic Stack Based Buffer Overflow
2. Integer Overflow
3. Off-by-One Stack Based
4. Bypassing NX using return to libc
5. Bypassing NX using chained return to libc
6. Bypassing ASLR using return to PLT
7. Bypassing ASLR using Bruteforce
8. Bypassing ASLR using GOT Overwrite and GOT Deference
9. Understanding glibc malloc()
10. Heap Overflow using unlink()
11. Heap Overflow using Malloc Maleficarum
12. Off-by-one Heap Based
13. Use After Free

1. Buffer Overflow Exploit
2. Shellcode Injection
3. Heap Exploitation Book

1. Overview
2. Stack Corruption for newbies
3. EIP Redirection
4. Execution Arbitary Code
5. SFP overwrite
6. Format Strings Bug

1. Simple Stack based BoF Tutorial for vulnerable server
2. SEH based BoF Tutorial for vulnerable server
3. Egg Hunter based Exploit for vulnerable server
4. Restricted Character Set exploit for vulneraable server

1. http://www.fuzzysecurity.com/tutorials.html

1. https://azeria-labs.com/

1. Assembly 101 – Part 1 – Basic
2. Assembly 101 – Part 2 – Conditional jumps , Logic and Shifiting
3. Assembly 101 – Part 3 – Multiplications , Repetition and Switches
4. Exploitation 101 – Part 1 – Stack gets over its Head
5. Exploitation 101 – Part 2 – Born in a Shell
6. Exploitation 101 – Part 3 – Heap Overflow , Unlink me , would you please?
7. Exploitation 101 – Part 4 – First Witchy House
8. Exploitation 101 – Part 5 – House of Mind : Undead and Loving it
9. Exploitation 101 – Part 6 – House of Force : Jedi Overflow
10. Exploitation 101 – Part 7 – House of Lore : People and Traditions
11. Exploitation 101 – Part 8 – House of Spirit : Friendly Stack Overflow
12. Exploitation 101 – Part 9 – Off-by-One and Uninvited friend joins the Party
13. Exploitation 101 – Part 10 – Integer Overflow : Adding one more ….AAAAAAnd it’s gone
14. Exploitation 101 – Part 11 – Format Strings : I will tell ya what to say

1. Exploit Module Format
2. Exploit Mixins
3. Exploit Targets
4. Exploit Payloads
5. Getting Shell

1. Stack : BoF with edb-debugger
2. Stack : Stack Based Overflow on x64 Linux
3. Stack : Binary Exploitation ELIF5 – ( Part 1 / Part 2 )
4. Shellcode : Shellcoding for Windows & Linux
5. Shellcode : Understanding Shellcode : Reverse Shell
6. Shellcode : How to write an egg hunter shellcode
7. Shellcode : Shellcode Debugging with Ollydgb
8. Shellcode : Shellcode without Socket
9. Shellcode : Shellcode Obfuscation #1
10. Shellcode : Shellcode Obfuscation #2
11. Binary : GOT & PLT for Pwning
12. Binary : What are the GOT & PLT – part 1
13. Binary : CPU , Memory and Buffer Overflow
14. Mitigation : Bypass ASLR + NX ( Part 1 , Part 2 )
15. Mitigation : New bypass & Protection Techniques for ASLR on Linux
16. Mitigation : Return to PLT , GOT to bypass ASLR remotely
17. Mitigation : Return to libc on Modern 32 bit and 64 bit  Linux
18. Mitigation : Make Stack Execution again
19. Mitigation : Can we bruteforce ASLR?
20. Mitigation : ROPping to Victory – Radare2 + pwntools ( Part 1 )
21. Mitigation : ROPping to Victory – Split ( Part 2 )
22. Mitigation : ROPping to Victory – Call me may be ( Part 3 )
23. Mitigation : Introduction to Returned-Oriented-Programming ROP
24. Mitigation : Introduction to ROP
25. Mitigation : x64 Bit Linux ROP
26. Mitigation : Return to LibC without function calls
27. Mitigation : x86 / x64 BoF Exploits & Borrowed code chunks exploitation techniques
28. Mitigation : Defeating DEP – The Immunity Debugger way
29. Mitigation : Blind ROP ( BROP ) Lab / Paper
30. Mitigation : Advanced Buffer Overflow Method
31. Mitigation : Exploiting the Random Number Generator – ASLR Bypass
32. Mitigation : Fun with Info Leaks ( DEP + ASLR Bypass )
33. Mitigation : Bypassig Memory Protections – The Future of Exploitation
34. Format Strings : GOT overwrite to change control flow remotely on ASLR
35. Format Strings : Defeating Stack Canary, NX and ASLR remotely on 64 bit
36. Format Strings : Exploiting Format String Vulnerabilities
37. Format Strings : Exploiting Format String – Getting the shell
38. Format Strings : Maximum Over-kill Two – from Format String to RCE
39. Heap : Exim Off-by-one RCE Exploiting CVE 2018-6789 with fully mitigations bypass
40. Heap : CVE 2018-6789 Walkthrough
41. Heap : Road to Exim RCE – Abusing unsafe memory allocator in the most popular MTA
42. Heap : From heap to RIP
43. Heap : GlibC malloc() for Exploiters / (Markdown Version)
44. Heap : heapwn – Collection of Heap pwnables binaries
45. Heap : how2heap – Educational Heap Exploitation Collection
46. Heap : ptmalloc fanzine – Heap Meta-data Corruption Series
47. Heap : Play with file structures – Yet another Binary exploit technique
48. Heap : Exploiting the wilderness
49. Heap : Heap Feng Shui in JavaScript
50. Heap : Project HeartBleed
51. Heap : An Introduction to Use-After-Free
52. Heap : Walking Heap using Py-dbg
53. Null-ptr Def : Large Memory Management Vulnerabilities

1. Slide : Linux Interactive Exploit Development with GDB & Peda
2. Slide : Understanding Heap by breaking it
3. Book : Hackin9 – Build your own exploits

1. Exploit Tips & Techniques
2. 23c3 : Unusual Bugs
3. ASLR Bypass – Bruteforce
4. ASLR Bypass – Ret2esp
5. ASLR Bypass – Ret2reg