Exploit Development Courses and Certifications

Reverse Engineering and Exploit Development

1292 ratings at Udemy

Application Penetration Testing for Security Professionals

• Udemy
• 6 hours 7 minutes
• Self-Paced
• Paid Course

Windows Exploit Development

Please note: The labs "Windows Basic Stack Overflow" and "Windows Egghunting (Kolibri HTTP Server)" are currently in maintenance and will be unavailable until fully functional. We apologize for the in

• INE
• 9 hours
• Self-Paced
• Paid Course

OffensiveCon

Automating Your Job? The Future of AI and Exploit Development

Explore the intersection of AI and exploit development in this keynote examining how automation impacts security professionals and the future of the field.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Free Video

Windows API Exploitation Recipes: Processes, Tokens and Memory RW

In today's secured environments, it is almost impossible for Red-Blue Teams to emulate modern adversarial tactics, techniques, and procedures using publicly available 3rd party pentesting products. Po

• INE
• 3 hours
• Self-Paced
• Paid Course

Ubuntu OnAir

Using Ubuntu for Exploit Development

Explora técnicas y herramientas para crear y probar exploits de manera ética en Ubuntu, potenciando tus habilidades en seguridad informática con esta plataforma versátil.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

John Hammond

Custom Java Deserialization Exploit - Serial Snyker

Exploit a custom Java deserialization vulnerability to achieve remote code execution and a reverse shell in a capture-the-flag challenge.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

This course is designed to equip penetration testers and red teamers with the essential knowledge and skills required to identify and exploit Buffer Overflow vulnerabilities. This course focuses speci

• INE
• 3 hours
• Self-Paced
• Paid Course

Linux Exploit Development

Please note: The lab "Strict Firewall Bypass (Format String Exploitation + Socket Reuse Shellcode)" is currently in maintenance and will be unavailable until fully functional. We apologize for the inc

• INE
• 11 hours
• Self-Paced
• Paid Course

OffensiveCon

Exploit Engineering: Attacking the Linux Kernel

Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OffensiveCon

Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution

Explore Linux kernel vulnerabilities and gain insights into exploiting the in-kernel SMB server for remote code execution.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

DEFCONConference

Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits

Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

media.ccc.de

Remote Code Execution via Fax Machine Interface - Security Exploit Analysis

Discover how vintage fax interfaces in modern printers can be exploited for remote code execution, demonstrated through live demos and technical insights from a Pwn2Own Ireland finding.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Hack In The Box Security Conference

Exploiting the Lexmark PostScript Stack

Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Recon Conference

Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study

Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.

• YouTube
• 28 minutes
• Self-Paced
• Free Video