EXP-301: Windows User Mode Exploit Development
Windows User Mode Exploit Development (EXP-301) is beginner-level course that teaches students the basics of modern exploit development.
-
Module 1: Windows User Mode Exploit Development: General Course Information
-
Module 2: WinDbg and x86 Architecture
-
Module 3: Exploiting Stack Overflows
-
Module 4: Exploiting SEH Overflows
-
Module 5: Introduction to IDA Pro
-
Module 6: Overcoming Space Restrictions: Egghunters
-
Module 7: Creating Custom Shellcode
-
Module 8: Reverse Engineering for Bugs
-
Module 9: Stack Overflows and DEP Bypass
-
Module 10: Stack Overflows and ASLR Bypass
-
Module 11: Format String Specifier Attack Part I
-
Module 12: Format String Specifier Attack Part II
-
Module 13: Trying Harder: The Labs
About The Course
Windows User Mode Exploit Development (EXP-301) is beginner level course that teaches students the basics of modern exploit development. Despite being a fundamental course, it is at the 300 level because it relies on substantial knowledge of assembly and low level programming. It begins with basic buffer overflow attacks and builds into learning the skills needed to crack the critical security mitigations protecting enterprises. Learners who complete the course and pass the exam earn the Offensive Security Exploit Developer (OSED) certification. The OSED is one of three certifications making up the OSCE3 certification along with the OSEP for advanced pentesting and OSWE for web application security.
Course Objectives
- Using WinDbg
- Writing your own shellcode
- Bypassing basic security mitigations, including DEP and ASLR
- Exploiting format string specifiers
- The necessary foundations for finding bugs in binary applications to create custom exploits
Pre-Requisites
- Familiarity with debuggers (ImmunityDBG, OllyDBG)
- Familiarity with basic exploitation concepts on 32-bit
- Familiarity with writing Python 3 code
- Ability to read and understand C code at a basic level
- Ability to read and understand 32-bit Assembly code at a basic level
What's included
- 40 Hours Training Course
- Certificate
- 13 Modules
- 24/7 Support
