Windows User Mode Exploit Development EXP 301 Course Training Certification
OffSec’s Windows User-Mode Exploit Development (EXP-301) course covers all aspects of contemporary exploit development methodologies. In a self-paced environment designed to improve their abilities in ethical hacking and vulnerability research, students acquire hands-on experience creating bespoke exploits and circumventing security defences.
The OffSec Exploit Developer (OSED) certification is awarded upon successful completion of the online training course and passing the accompanying test. This certification verifies skills in sophisticated exploit creation techniques including as reverse engineering, shellcode authoring, and circumventing contemporary mitigations, making qualified personnel helpful in detecting and fixing software application vulnerabilities.
Who is it For?
The EXP-301 course is suited for persons with a strong background in penetration testing and programming who want to master exploit creation techniques and eventually acquire the OSED certification.
Exam Details
The OffSec Exploit Developer (OSED) test is a rigorous 48-hour proctored assessment that replicates a real network with several susceptible systems. You are responsible for abusing these systems and producing evidence of exploitation.
Benefits of the course
- WinDbg Tutorial
- Stack Buffer Overflows
- Exploiting SEH Overflows
- Intro to IDA Pro
- Overcoming Space Restrictions
- Shellcode From Scratch
- Reverse-Engineering Bugs
- Stack Overflows and DEP/ASLR Bypass
- Format String Specifier Attacks
- Custom ROP Chains and ROP Payload Decoders
Curriculum
- 10 Sections
- 0 Lessons
- 60 Hours
- Module 01 – Introduction to Exploit DevelopmentUnderstand the basics of exploit development, memory corruption, and how vulnerabilities are identified in applications.0
- Module 02 – Windows Architecture and Assembly BasicsLearn how Windows works at a low level, including memory structure and assembly language required for exploit development.0
- Module 03 – Stack-Based Buffer OverflowsExplore how buffer overflow vulnerabilities occur and how to exploit them to control program execution.0
- Module 04 – Structured Exception Handler (SEH) ExploitationUnderstand SEH-based exploitation techniques used in Windows applications.0
- Module 05 – Shellcode DevelopmentLearn how to create custom shellcode and payloads for successful exploitation.0
- Module 06 – Debugging and Analysis TechniquesGain hands-on experience using debuggers to analyze crashes and understand program flow.0
- Module 07 – Bypassing Security ProtectionsLearn techniques to bypass protections like DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization).0
- Module 08 – Egg Hunters and Advanced Payload TechniquesUnderstand how to use egg hunters and other techniques to execute payloads in constrained environments.0
- Module 09 – Automation and Scripting for ExploitationUse scripting (Python, etc.) to automate exploit development and testing processes.0
- Module 10 – Exam Preparation and Practical LabsPrepare for the OSED certification with real-world labs and exploit development challenges.0
