Windows User Mode Exploit Development EXP 301 Course Training Certification
OffSec’s Windows User-Mode Exploit Development (EXP-301) course covers all aspects of contemporary exploit development methodologies. In a self-paced environment designed to improve their abilities in ethical hacking and vulnerability research, students acquire hands-on experience creating bespoke exploits and circumventing security defences.
The OffSec Exploit Developer (OSED) certification is awarded upon successful completion of the online training course and passing the accompanying test. This certification verifies skills in sophisticated exploit creation techniques including as reverse engineering, shellcode authoring, and circumventing contemporary mitigations, making qualified personnel helpful in detecting and fixing software application vulnerabilities.
Who is it For?
The EXP-301 course is suited for persons with a strong background in penetration testing and programming who want to master exploit creation techniques and eventually acquire the OSED certification.
Exam Details
The OffSec Exploit Developer (OSED) test is a rigorous 48-hour proctored assessment that replicates a real network with several susceptible systems. You are responsible for abusing these systems and producing evidence of exploitation.
Benefits of the course
- WinDbg Tutorial
- Stack Buffer Overflows
- Exploiting SEH Overflows
- Intro to IDA Pro
- Overcoming Space Restrictions
- Shellcode From Scratch
- Reverse-Engineering Bugs
- Stack Overflows and DEP/ASLR Bypass
- Format String Specifier Attacks
- Custom ROP Chains and ROP Payload Decoders
Curriculum
- 10 Sections
- 0 Lessons
- 60 Hours
- Module 01 – Introduction to Exploit Development0 ItemsUnderstand the basics of exploit development, memory corruption, and how vulnerabilities are identified in applications.
- Module 02 – Windows Architecture and Assembly Basics0 ItemsLearn how Windows works at a low level, including memory structure and assembly language required for exploit development.
- Module 03 – Stack-Based Buffer Overflows0 ItemsExplore how buffer overflow vulnerabilities occur and how to exploit them to control program execution.
- Module 04 – Structured Exception Handler (SEH) Exploitation0 ItemsUnderstand SEH-based exploitation techniques used in Windows applications.
- Module 05 – Shellcode Development0 ItemsLearn how to create custom shellcode and payloads for successful exploitation.
- Module 06 – Debugging and Analysis Techniques0 ItemsGain hands-on experience using debuggers to analyze crashes and understand program flow.
- Module 07 – Bypassing Security Protections0 ItemsLearn techniques to bypass protections like DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization).
- Module 08 – Egg Hunters and Advanced Payload Techniques0 ItemsUnderstand how to use egg hunters and other techniques to execute payloads in constrained environments.
- Module 09 – Automation and Scripting for Exploitation0 ItemsUse scripting (Python, etc.) to automate exploit development and testing processes.
- Module 10 – Exam Preparation and Practical Labs0 ItemsPrepare for the OSED certification with real-world labs and exploit development challenges.
