Professional Exploit Development Training

“Bootcamp”

“Advanced”

 

Even though I was initially planning to register only for the Advanced Course (due to already possessing relevant advanced certifications on exploit development), I am so glad that I made the decision to attend the BootCamp course as well. It definitely filled in certain gaps I had (which the other certs did not truly cover), and prepared me mentally for the next step.

I enjoyed every minute of the course, but even though it’s now over, I feel that this is the start of a new beginning due to the eye-opening towards certain concepts.

Peter has been a truly inspiring mentor during the course, who did not hesitate to devote extra hours, without which I personally would need more time to get to the point myself and the class was, and he made a true effort so that we really understand the root cause of what we were doing.

I have already registered for the Advanced Course, and looking forward to more exciting times ahead!

Thanks a lot Peter.

 

Nick
Corelan Bootcamp

 

Peter managed to exceed my expectations that I had out of this course.

I had previously attended the Bootcamp training, with the intention to continue with the Advanced course so as to level-up my skills, but more importantly to improve my thought processes into exploit development.

We delved into how heap management works, and leveraging its functionality to exploit bugs mainly in browser software. We explored proof of concepts of Use-After-Free conditions, Memory Leaks, Heap Feng Shui and precise Heap Spraying by performing quite intense, long, and instrumental labs.

Personally, the real journey begins after the end of this training, as Peter provided the tools/ ideas/ examples/ thought-process/ inspiration for further research on the exciting path of modern software exploitation.

Peter has been a truly inspiring mentor during the course and made everything possible to ensure that the core concepts are understood by the whole class.

I am very glad that I had the opportunity to attend the Advanced Course, and I would definitely attend any other future training done by Peter. Many thanks Peter!

 

Nick
Corelan Advanced

 

I spent a lot of time improving my skills in Win32 exploit development and Peter’s blog was an important source of knowledge. However, I did not have knowledge about Win32 Heap and I wanted to know how exactly my skills were. That is the reason why I took the Advanced course.

Peter’s training was exactly the kind of training I was hoping to have: a large amount of structured knowledge in many domains. Peter did not just provide theoretical concepts: he also provided many exercises, pushing everyone to do the best. Exercises were clearly not easy, but Peter was not here to give exercises with solutions: he was here to train us to find solutions by ourselves.

The course was long, intense, but above all extremely rewarding.

Thanks Peter!

 

Sebastien
Corelan Advanced

 

I enjoyed this course a lot and and it opened my mind for the journey towards finding and exploiting browser heap related bugs and not only! One of the most important aspects I found; is that the course is focused to create a way of thinking in how to approach finding and exploiting a certain class of bugs relating to the heap. I believe at this moment, that Peter’s class is the fastest way into opening the path towards this journey and I think it is an excellent designed course. In addition, care ensuring that no student gets left behind throughout the days is at the uppermost level, The examples used for the bug exploitation are perfectly chosen and not last the teaching skills and the continuous support impressed me extremely.

I would highly recommend this course anytime!

 

Alex
Corelan Advanced

 

Peter (the man on the other side of the rabbit hole) shared with us his years of experience (undocumented research & no google results) in 3 days.

The advanced course is extremely worth the investment (luckily my company paid for it). The thought process is the most critical part of the exploit development.

Peter is extremely caring for all students to make sure that no students are left behind.

It’s extremely rare to find the personalities of an expert exploit developer and a teacher combine into one person. And of course he shared with us some of his ‘proprietary’ materials. Lastly his technical guide comes along with his genius humor.

Looking forward to Bootcamp in SG 2019.

 

Louis
Corelan Advanced

 

Peter is among the best exploit developers and researchers there are. The knowledge you will learn in this class will save you months of independent effort in addition to putting you at a distinct advantage when performing your own research.

It is extremely difficult to get this knowledge in a form which is well structured and professionally written, making this course an absolute gem. After this course, you will be able to, at the very least, understand even the most seemingly perplexing binary exploitation write ups often published by the likes of ZDI. In the best case, you’ll be able to apply this knowledge to broaden or kick-start your research aspirations. You’ll also come away with notes and material that are invaluable – this information will not appear after a few quick google searches.

Thank you for the training, Peter. Can’t say enough good things about it.

Dan
Corelan Advanced

 

Just got back from the training and still trying to process everything. I will be busy for months working through what Peter has provided us with. If you are thinking about attending the training, but you are unsure because it “only” deals with Win32, IE on Win7, let me tell you one thing: It doesn’t matter. This has nothing to do with “before you run, you have to learn how to walk”. In this training, Peter explains the process of developing exploits on modern systems. The course aims to teach you how to think and how the heap works. It does not matter if you don’t write exploits for Edge on x64, trust me. In order to do that, you have to put in the work first and understand how the low level mechanisms and data structures work and at the end of the day, most of the content you learn will (with modifications) also apply to Win10. It was one of the best technical trainings I was ever able to attend. Thanks Peter!

 

Bernd
Corelan Advanced

 

The training was very consequent and well edited. The harmony of theorems and exercises and the details of the explanations tells about a lot of experience and care of the profession. Also, Peter is very friendly and helpful. This is The Place where you can get real knowledge and mindset for your own research.

Thank you for the training, Peter!

 

Appleakator
Corelan Advanced

 

Loads of excellent reviews. Mine would not be different. Peter has a very rare talent to break/research the stuff and even more rare talent to be a great teacher. He can explain very complicated things in a clear way and guide you through more complex situations. The aim of this course is not to show tips and tricks, but build fundamental knowledge how to attack heap. Loads of exercises will give you a chance to master exploit dev skills. I also enjoyed his insights and thoughts about research, ways to upskill and other things.

Thank you Peter for doing great job! All the best!

Denis
Corelan Advanced

 

Peter is among the best exploit developers and researchers there are. The knowledge you will learn in this class will save you months of independent effort in addition to putting you at a distinct advantage when performing your own research.

It is extremely difficult to get this knowledge in a form which is well structured and professionally written, making this course an absolute gem. After this course, you will be able to, at the very least, understand even the most seemingly perplexing binary exploitation write ups often published by the likes of ZDI. In the best case, you’ll be able to apply this knowledge to broaden or kick-start your research aspirations. You’ll also come away with notes and material that are invaluable – this information will not appear after a few quick google searches.

Thank you for the training, Peter. Can’t say enough good things about it.

 

Dan
Corelan Advanced

 

Just got back from the training and still trying to process everything. I will be busy for months working through what Peter has provided us with.

If you are thinking about attending the training, but you are unsure because it “only” deals with Win32, IE on Win7, let me tell you one thing: It doesn’t matter. This has nothing to do with “before you run, you have to learn how to walk”.

In this training, Peter explains the process of developing exploits on modern systems.

The course aims to teach you how to think and how the heap works. It does not matter if you don’t write exploits for Edge on x64, trust me. In order to do that, you have to put in the work first and understand how the low level mechanisms and data structures work and at the end of the day, most of the content you learn will (with modifications) also apply to Win10.

It was one of the best technical trainings I was ever able to attend. Thanks Peter!

Bernd
Corelan Advanced

 

One of the most gruelling yet beneficial training courses that I have ever attended in my entire ofsec career! This course is definitely a good start for those who really want to get well acquainted with the basics of exploit development. On top of that, Peter is such an amazing instructor in terms of delivering his content and sharing us some tips and tricks when facing problems during the lab exercises. I would personally recommend his training to anyone who wants to start off basic exploit development.

Hamzah
Corelan Bootcamp

 

I took the Bootcamp training in March 2019 and I was impressed by how Peter explained highly complex topics with ease, patience, and enthusiasm. No matter what’s your level of experience in debugging/exploitation, you will learn a lot! 0-day exploitation will become much easier to you once you know the foundations Peter teaches.

As far as I know, there are no better (or even comparable) courses than the ones offered by Corelan’s, which deeply explain exploitation techniques. Hey! Don’t you know that Peter is the developer of the **popular** exploitation module: mona.py! So, you’re getting your knowledge right from the mouth of a guy who spent all of his life developing and researching this science!

Once I practice and master the Bootcamp’s materials/exercises, I will DEFINITELY attend the Advance training.

Thanks, Peter

B@N
Corelan Bootcamp

 

First I would like to start by thanking Peter for his patience and dedication to answer every question in great details. What separate Peter from other instructors is his methodological and logical approach in delivering the course materials. Hands down, this is the best security training I attended.

Every step is explained with backing theory and clear logical reasons on why we were doing what we were doing to create the exploits. There were no vague answers.

The way Peter puts ideas and concepts together is an inspiration. You may not master every topic discussed right away (as you have to practice, practice and practice) but the main take away is that you have to apply yourself and work hard.

I specifically liked the exercises as they were well-thought out. You will see yourself grasping ideas as you do the exercises yourself (with little help along the way from Peter) which I liked because you will earn knowledge the hard and the right way.

Thank you for a great learning opportunity. What a great person to be around.

 

Omar Asali
Corelan Bootcamp

 

Peter is one of the finest and most attentive trainers I’ve ever met. If you’re looking for a refresher or solid introduction to Win32 exploit development, Corelan Bootcamp is an excellent choice. Peter will break you of any bad exploit dev habits you have. ;)

 

wvu
Corelan Bootcamp

 

So I have been interested in learning exploit development for some time, but never had the motivation to start from scratch on my own by reading blog posts on the Internet. This training is exactly what I needed to, in 4 very efficient days, get me started on what seemed important to me for this discipline:

– getting some knowledge about modern operating systems and applications that is relevant for exploit development
– understanding various protection mechanisms, why they have been adopted over the years and how to bypass them
– learning to use the right tools to debug programs and extract useful information for exploits
– practicing exploit development by manually going through the necessary steps to write an exploit
– being aware of the multiple options that could be used to solve given problems
– having information about what is considered good practice as well as good tips for exploit development

This training is very well put together: It is clear, to the point, has a nice flow, has a good balance between theory and practice, ultimately allowing to get a good overview of the subject as well as understanding the important details.

The course just ended, now I need to put things into (more) practice to consolidate everything.

Raphaël
Corelan Bootcamp

 

In short, this course is fantastic!

It’s a 4-day bootcamp style course, fairly priced, covering Win32 exploit development on Windows 10. Some topics include: stack buffer overflows, SEH overwrites, bad character analysis and encoders, basic shellcoding, egghunters, writing your own Metasploit exploit modules, ASLR partial overwrite bypass, and wrapping it up with an almost full day of ROP for DEP bypass.

After some initial background material on hardware, OS and memory management, from then on you are heads-down and hands-on-keyboard in Immunity debugger, mona, and Python all day every day. There’s also some Ruby in the Metasploit section where you learn to write your own custom Metasploit modules for several of the exploits you just learned.

The class provided lots of extra time, often starting early and ending late, giving students at every level the opportunity to get the most out of the course.

The quality of the labs was excellent, not giving away too much so you can learn on your own, but providing hints and solutions if you get stuck. There are also several supplemental “take home” exploit labs in the material you could work on outside of class or after the training ends to continue to sharpen your skills. Another excellent value add is that after the course ends, there’s an available support forum and Slack channel that all students can join for ongoing help in continuing to develop skills.

Whether you’re just starting out in exploit dev or have covered this material before and would like a great in-depth refresher, this is the class for you.

Peter has many years of experience writing exploits and is the author of mona, so during his step by step walkthroughs you will definitely pick up a lot of his tricks along the way that will help you save time when writing your own exploits. Although he is very knowledgeable, he is also very approachable, humble, patient and is excellent at teaching very complex topics in a way that students at all levels can understand.

If you’ve always wanted to learn how to write exploits, modify exploits, and understand how they work, but felt a little intimidated signing up for such a technical class like this, this is my advice: If you have a passion to learn exploit dev and are willing to put in the time, devote yourself to completing the labs even if it means staying late in class or taking the work back with you to the hotel room to work on it at night, then I can’t think of a better instructor and a better course to kick that off than this one.

Personally, I can’t wait to sign up for the Advanced Class which is the one that follows this one and looking forward to whatever newer classes may be released by Corelan Training in the future.

 

DeckerXL
Corelan Bootcamp

 

I completed my OSCP and was looking for the next step in my education. The quality of the class easily exceeded my expectations.

The material might be extremely dense for some, but I felt that Peter does a great job of breaking it down. Based on what I observed from other students, I believe it’s helpful to have some Python experience since a lot of the lab material required creating Python scripts. Creating the Python scripts on my own helped solidify my understanding of the material. I look forward to take the advanced class. Keep up the good work, Peter!

 

Darren Shu
Corelan Bootcamp

 

I had a blast when attending the Corelan Advanced training. I learned heaps about heap management in Windows and exploitation. Furthermore, during the training a lot of concepts became a part of my reversing / exploitation skills such as: vtables, pointers, IAT and ASLR. Although I was familiar with most of these concepts, during the training they became more clear to me, since they were building blocks for the heap exploitation course. The training is provided at a fast pace and Peter is able to create a great environment for learning. I did not only learn how the Windows heap works, but was able to use the learned concepts to understand the basics about the Linux heap manager. Within a week of the training, I solved my first Linux heap CTF challenge, without any previous knowledge of how the Linux heap worked :)

 

Rikkert Ten Klooster
Corelan Advanced

 

First of all I would like to thank Peter, for the incredibly cool 3 days in Paris. Thank you very much for your patience in answering questions and the opportunity to share your extraordinary knowledge with us!

After participating in the bootcamp in April of this year in Belgium (BruCON Spring 2019), participation in the advanced course was only the logical consequence.

What makes the course so special, is the methodical and logical structure based on Peter’s practical experience.

Why you should not miss BOTH courses and participate? Very easily:

– Theoretical bases, their implementations as well as common “halftruths” or “mistakes” are explained in a practice-oriented way.
– No matter what level of knowledge each participant brings, Peter answers every question and never tires of explaining everything in an understandable way.
– Extensive training material, with a huge amount of valuable information (for offense and defense).
– Many private solutions which never been published by Peter.

Both courses will be definitely be part of our company training program as a “MUST” for anyone.

Conclusion: “Learn from the best, or die like the rest”

Peter, you are definitely one of the best!

 

Mario Kornab
Corelan Advanced

 

I have just finished the Corelan advanced training done by Peter Van Eeckhoutte. What can I say, best training I have attended so far. Peter is dedicated, passionate and the way he teaches you is great. There is no such way of learning something than trying. Nothing is given during the training, you will fail many times but once you achieve something you will know why it worked and how it works behind the scene. You don’t just learn how to launch a bunch of tools. Painful experiences are always better remembered ;)

 

Grégory DRAPERI
Corelan Advanced

 

Peter is a really knowleadable and enthusiastic teacher. The information you are gonna get in this training will save you tons of personal research on Windows internals.
The quality of the material and teaching is absolutely stellar: heap management on both Win7 and Win10, in-depth analysis of specific vulnerabilities to consolidate concepts, tons (literally tons) of PoCs to hint you during your research after the training. I feel this course gave me material for years to come, and Peter will give you all the necessary tools to continue on after the training.

On top of this all I’ve really enjoyed Peter as a person: dedicated and willing to support his students all the way, during the classes and afterwards, he is a true legend. What you even get after the course is an incredible amount of guidance and support from alumni and Peter himself!

I really would not know what to ask more for!

 

Andrea
Corelan Advanced

 

The Corelan Advanced Exploit Development (CAED) is one of the most challenging and courses I have taken. The depth of information provides a nice baseline for understanding the underlying technologies required to leverage the techniques for successful exploitation. The amount of information covered in the course could fill a semester-long class at a graduate-level CompSci program.

Peter did a great job of organizing and delivering this information. The course will give you the knowledge, resource, and examples to further expound your knowledge in Advanced Exploit development.

My favorite part of the course is the 6months+ worth of homework along with all the resources like the forums.

Well worth the investment!

 

Gershom Rogers
Corelan Advanced

 

This course was by far one of the most challenging courses I have taken so far, but Corelan does an excellent job of removing the fear of these more advanced topics and won’t leave you in the dark during and after the course. I’ve been utilizing Corelans free research since I got into Exploit Development and when I discovered he offered this course I knew the moment I had the opportunity I had to take it.

I had expectations before going in and all where exceeded. Then again what more can you expect from the man who invented Mona.py and continues to publish research?

Don’t think twice!

 

wetw0rk
Corelan Advanced

 

First of all, I would like to thank Peter for a really extraordinary experience, his passion and dedication are a real inspiration for everyone!

I was really looking forward to pushing my knowledge in exploit development to the next level and finally going for the heap, without having any prior experience related to that, in terms of exploit development. The outcome is that I now feel really comfortable in diving into heap exploits and really understanding them.

Took the Corelan Advanced course at Brucon2019. Scrolling trough all the testimonials and knowing the Corelan team’s publicly available work, led me to some high expectations when I enrolled for the class. I’m really happy to say that the training lived up and even exceeded them in some aspects.

Peter is really great at explaining basically everything, the course structure and materials are very well organised and they are facilitating a consistent learning curve. The in-depth level of analysis and the granularity in understanding the course content are key takeaways. I would describe the training as a combined practical-theoretical experience with a focus on deep understanding for Windows Internals, exploit development and Windows heap concepts. The whole training helps you in building a strong knowledge base in which you can later invest your time into. Plus, the received support after the training session, all the “homeworks” :) and the mindset obtained for looking at things as an exploit developer perspective are priceless.

I hope Peter will come up with other trainings in the future as well, really looking forward to it!

Thanks again Peter for all the knowledge and for truly inspiring me!

Highly recommend it, well worth the investment!

 

Stefan Nicula
Corelan Advanced

 

This is a course for engineers who are already experienced in binary exploitation and want to deepen their knowledge by taking a hands on class with one of the best teachers in the subject.

As a instructor Peter (Corelan) is a very experienced person which has written a lot about windows exploitation and explains very well each one of the topics in the class, giving you all the material you need if you want to take you time and study on your own.

The course is well structured, and each one of the topics has a set of exercises so you can practice and understand the underlying concepts on a variety of topics such as windows debugging, memory layouts, ROP and even browser exploitation.

Filipe Paz Rodrigues
Corelan Advanced

 

If you’re comfortable with ROP and if you want to take a deep dive into the world of heap exploitation, I can highly recommend this course. Peter is an excellent and inspiring teacher and researcher that’s able to explain even the most complex aspects of the heap in a structured manner. He really cares whether his students understand the material in class and he even provides exercises that should last for months after the class has finished.

This is the best hands-on experience you can get and if you’re willing to learn, this is for you.

Mister1337
Corelan Advanced

 

Let me start with a background I have not done a ton of active exploit dev. I was very nervous and excited, at the same time to start something I loved from the start of my InfoSec career. (Not to mention getting ready to be crushed by a tank of Win heap knowledge)
Finally, I brought my body to the training ground, started churning into the vast & deep knowledge Peter has handcrafted in these 4 days. Each day I felt overwhelmed, empowered with teachings and the training enthusiast Peter has in him. Despite my dumbness, I feel so inspired to continue my interest and turn into a passion for exploit development all credit goes to Peter. Now that I know so much that I started spending my nights at win heap stores and for sure years to come I will make it less frustrating :).
To give you guys what felt, I ran myself into exploit motions at the airport layover, on plane & now back home. If you want to eat, drink, sleep with windbg, browser heap, memory leaks, and poop exploits you are in THE RIGHT PLACE.

 

Rohit Mual
Corelan Advanced

 

This course was amazing, Peter set an incredible pace from the very start and didn’t let up until the end.

I now feel like I know the various Windows Heap internals more intimately that I thought possible and I have the means and materials to take that further.

I can now explore everything up to up-to-date 64bit Windows 10 and know that I have the grounding to actually craft exploits on those systems.

I can’t recommend this course enough, if you’re thinking of taking it, do it.

M0rv4i
Corelan Advanced

 

I have no doubt stating that Corelan Advanced has been the best infosec training I had so far.
Peter is an excellent instructor who’s able to convey his experience and communicate passion about the topics and give you the tools/primitives to investigate and explore yourself how to deal with exploit development in 2019.
The training homework will keep me busy for the next 6 months/a year for sure, but now I do feel more comfortable and ready exploring and researching modern bug classes.

If you want to dive into modern exploitation, this is for you.

 

Matteo Malvica
Corelan Advanced

 

Peter’s ability to explain complex concepts in a simple and pragmatic way is exceptional. His Windows Exploit Development training is of the highest standard and will help newcomers and seasoned security testers alike understand modern memory corruption techniques.

I’ve completed both the Bootcamp and Advanced courses now, along with OSCP and OSCE and I’ve learned invaluable lessons from each.

If you’re interested in Windows Exploit Development, ROP and heap exploitation, then you should definitely prioritise Corelan training. It’s truly a privilege to take part in.

I’ve learned a tonne, but the real learning comes with the exercises that are included as homework during and after the course.

 

Rick
Corelan Advanced, Corelan Bootcamp

 

I completed Peter’s recent Bootcamp/Advanced Exploit Development training held in Sydney, 2019. Having worked in the computer security field for many years I wasn’t sure how much I was going to get out of the training but I am so glad I decided to attend as these two training courses were without doubt two of the best training experiences I have had in my career.

Peter’s ability to teach students of different knowledge/skill level is second to none and his humour and enthusiasm make the long days (i.e.9:00 – 10pm) seem to fly by.

His depth of knowledge on Windows heap internals is world class and he provides enough training material and exercises to keep you busy for a least a year!

I have no hesitation in recommending both courses to people interested in the field, experienced security professionals and anyone else who wants to experience a truly great educator.

 

Paul Quirk
Corelan Advanced, Corelan Bootcamp

 

Having completed the OSCP, I thought I knew stack overflows pretty well.. until I realised how little I really understood about stack ‘buffer’ overflows and in particular ‘Saved Return Pointer’ overwrite exploits. Peter is an excellent teacher and explains the exploit development process in such depth that makes these complex concepts almost too easy to understand. The knowledge of this course stretches far far far past what was covered in the OSCP in regards to windows exploit development and is definitely an excellent course to take your skills to the next level.

 

 

Chris Whipp
Corelan Bootcamp

 

The Corelan Advanced Exploit Development is a great investment and it is certainly very challenging.

I learned heaps for heaps by exploiting my brain with huge amount of information.

The Technics/tricks you will learn can be applied in any version of Windows OS even in future editions! The actual challenge begins after the completion of the course homework for months…

I highly recommend this course if you know how to exploit the stack and you looking to explore the wild heap structures and exploit them.

 

Vpappas
Corelan Advanced

 

Thank you for conducting such an amazing training on modern windows exploitation, i can’t describe the amount of knowledge i gained in those 4 days. I would highly recommend corelan advanced training. The most important thing to take away from the training is you don’t get to think about one specific vulnerability but rather a mindset on how to tackle issues on runtime which is worth way more than poping a shell for just one vulnerability. It is not some course that just copies public research/vulns and hands over exploit, rather one will deep dive into heaps and memory management (which by the way is the foundation for any exploit on modern windows OS).

It is worth every single penny spent !

 

Owais
Corelan Advanced

 

Great, in depth, analysis of Windows memory management and ingenious ways of using its inner-workings to build working exploits bypassing modern controls.

Peter is a great researcher and trainer. A hard to find combination that makes this course an absolute value for money!

 

Yiannis Koukouras
Corelan Advanced

Once you are done with all the basic exploitation tutorials and trainings, you should get this one.

The training is amazing

Peter is one of the most knowledgeable people for the subject and it shows from the first minutes. The content is great, organized and has a great learning curve. It builds up until everything is very clear on your head regarding windows heap exploitation. Once the training is done you feel like you are one step away from researching and building your own exploits. All it remains is to dedicate time to do it. You are going to have all the tools and knowledge needed.

 

GK
Corelan Advanced

 

The Corelan Advanced Exploit Development was an amazing experience.

It let you understand in a very detailed way how Heap works on Windows 7 and Windows 10 and how to use some techniques to correctly exploit it.

Peter is a very good instructor, He is able to explain everything in a very clear and easy way. Peter also gives to you a “point of view” that you can use in every scenario and every version of Windows. At the end of the course, you will be provided with a lot of exercises.

If you want to understand how Windows Heap works, how to exploit it and how to “think in the right way”, this course is what you are looking for.”

 

Raffaele Sabato
Corelan Advanced

 

Amazing training ! Peter is an excellent trainer that wins your respect from the very first moment! I learned lots of things which are now very clear in my mind. I strongly recommend this course to anyone who wants to dive into low level concepts ! Excellent quality ! Thank you Peter, for such a powerful training course!

 

Xenofon Vassilakopoulos
Corelan Advanced

 

This training was awesome! I did a few security trainings before, but this is definitely my favourite so far!

Peter was very very well prepared and had a lot of patience to answer all questions. The training starts gradually with windows 7 and then builds up to windows 10 and latest heap exploitation techniques.

Very intensive, even though I had a bit of experience about these topics previously. After the 3rd day was felling quite tired of and day 4 was complete brain meltdown!

Loved it!

 

Adrian
Corelan Advanced

 

The Advanced Exploit Development training is the best training I’ve ever done so far. Unlike many training about exploit development, this course starts with the fundamentals of memory management on Windows and then dive into exploitation of heap-related vulnerabilities, bypassing modern memory protections. This approach will give you all the knowledge needed to understand how to conduct your proper research on known and future memory features/protections. Mastering heap exploitation is a long journey, and, without hesitation, this course is the best starting point. I highly recommend the Corelan Advanced Exploit Development training.

 

Christophe De La Fuente
Corelan Advanced

 

I was skeptical to learn new things in the bootcamp, I was totally wrong.

The way of teaching that Peter use is amazing.

There is no place for luck or nopsled, you understand really what you are doing and he share so much tips, tricks that you can’t found elsewhere. His approach is always different than all other materials I can found.

Even if you think you have the level to take the advanced class, I still recommend to take the bootcamp first.

Jonathan B.
Corelan Bootcamp

 

The training was awesome, despite non being a completely “noob” in exploit development I choose to take the bootcamp in order to be sure to have the right foundations before moving to the advance course; to my surprise I learned lots of things which are now very clear in my mind. I understood some “obscure” windows internals and why they works in this manner, there is no more space for NOPs now that I really understand what I’m doing.
Peter is not just amazing from a technical point of view, he’s also a really excellent (and funny) trainer who definitely have passion for what he does and that strive for the best. I can’t recommend him enough, just come to the training and see it by yourself.

 

Paolo
Corelan Bootcamp

 

This training is amazing. Peter starts with the foundation of all exploiting: the OS and how it talks to the CPU/memory, and how that is important to exploitation. His way of describing complex concepts in simple drawings is amazing and really makes you understand what you are doing.

We wrote exploits for all sorts of stuff, and what seemed like magic has been neatly reduced to comprehensible, understandable steps.

Long story short, great training, great material, attend if you can.

 

Martin
Corelan Bootcamp

 

I’ve been to various trainings until now and always left disappointed in the lack of technical depth. Peter is what I call a master of his domain. In bootcamp he teaches you how the OS works, how memory works, and all other inner workings of a computer (relevant to Exploit development), then and only then he goes into exploitation. Be comfortable with Assembly, python and prepare for a hardcore training if you are a beginner.

Peter is 1/ an expert in communication, 2/an expert in exploitation and 3/ an expert in teaching skills

He loves what he does and you can see it clearly. I would give him 10 stars if I could.   As an advice, if you are a beginner in exploitation and want to learn as much as possible, do at least 5-10 simple exploits before coming to the training, the pace is brutal.   Thank you for a great training Peter

 

Madalin
Corelan Bootcamp

 

The Corelan Bootcamp is a good start for the craft of exploit writing. Peter is a fantastic teacher with a deep knowledge and fine sense of humour. Peter explains the basics and after three days you should not only know what you are doing, but why you are doing it and why NOPs kill kittens. ;-)

I already had some experience in stack buffer overflows before the training, but I learned a ton of new things.

I highly recommend this training.

Thank you Peter for a wonderful time!

 

Mick
Corelan Bootcamp

I took the training because I was really interested in exploit development and ROP, I had quite a few gaps in my knowledge and this training not only closed the gaps but added a whole new world.
Peter is in my opinion one the few who really knows this topic and can explain this in a funny and good way.
Everything is really well explained and very pace, looking forward in doing the homework.

The decision to do this training in person is indeed mandatory and this has an extra added value which can’t be achieved through video training so I if you can make it to the training go for it… you won’t regret this!!!

Jerco Veltjen
Corelan Bootcamp

 

Peter is simply amazing in explaining complex concepts and operating system internals in a very understandable and engaging way. His enthusiasm for the subject works really contagiously.

This course will give you a solid foundation and a boatload of exercises to take home with you to get you started in heap exploitation.

 

Bob
Corelan Bootcamp

 

This was my first course to start my exploit development track. I have been reading around internet for a while and got lost in some places. Then decided to get a professional training. Going through internet and getting people reviews there were couple of options. Finally, decided to go through corelan bootcamp based on a fair comparison with other courses.

Guest What !! This is the best place to start with. Very detailed explanation in very simple terms. Peter has all the answers to the questions I had and he can go as deep as you ask. But in very simple words and examples which makes it easy to understand.

Many thanks to Corelan and Peter for this amazing training.

 

Mohammed Al Baqari
Corelan Bootcamp

 

I had a pleasure of attending an extraordinary #Corelan_Bootcamp by Peter Van Eeckhoutte in partnership with Hackers Academy, Telecommunications Regulatory Authority, Dubai Electronic Security Center & GISEC

Peter is indeed an inspiration for all of us in the #Cybersecurity community and learning directly from the creator of #mona is an honor. Little I knew about the life’s work which is out there in the wild without due recognition.

I truly admire peter’s courage to teach a live course effortlessly in this #pandemic era.

Peter not only made Exploit Development easy for us to understand but he actually rewired our brains on Windows Internals.

The course material was carefully prepared and appropriately placed with challenges that makes us run for our lives. Thank you so much peter for your time and amazing knowledge I can only say #w00tw00t. Corelan Team

 

Shahid Ahmed
Corelan Bootcamp

 

I attended Peters Bootcamp session in Stockholm. My expectations were high for this course and they were met and surpassed!

The entire course is focused on 32bit (last day had a session on more 64bit specifics) and is a excellent primer for those who wants to get into exploit development on Windows.

Peter managed to demystify ROPs and the MONA tool. Peters teaching skills are top notch and documentation and labs are one of the best.

I can highly recommend this course. I am looking forward to attend to the Advanced course.

 

Michael
Corelan Advanced

 

Peter’s 4-day class in Columbia, MD was a truly unique experience. The class is designed exceptionally well, and Peter himself is an exemplary instructor.

Peter designed this class such that you start out from fundamentals, and then progress to much more complex topics in a very incremental, easy-to-understand manner. He provided us with all the theory required to ignite our curiosity to ask the right questions of ourselves, plus with all the tools necessary to be able to answer those questions. We exercised knowledge of this theory to answer practical questions, plus he provided us with many meaningful exercises that pave the path towards becoming a more capable exploit developer. Some exercises were during class, some during evenings after class, and some for the years to come. :)

I’ve heard from some folks about why he doesn’t jump straight into newer Windows OS 64-bit programs (which he does provide theory about later in the course), but it’s important to realize that this teaching methodology is WHY you are able to eventually understand more modern stuff towards the end. I honestly would not have it any other way, because by the end of the class, I had all the theory and tooling required to figure out Win10 64-bit heap / program functionality, even though he started with Win7 32-bit programs. Moreover, he taught the theory of how memory allocators might work in general, and how we would go about investigating its behavior, regardless of which OS, # of bits, custom memory manager, etc… He taught it perfectly.

Thanks for the great times and lessons, Peter. It was truly an honor to attend this course.

 

Faisal
Corelan Advanced

 

I attended Peter’s advanced training in Columbia, MD. Nowhere else will you find an instructor capable of expressing complex topics in such a painlessly comprehensible manner. My newfound understanding of Windows’ heap has made what was once a cryptic headache feel elementary.

Peter’s hands-on guidance helps to reinforce the learned material with real-world practice. If you are interested in building a thorough foundation of knowledge and skills in the realm of Windows heap exploitation, then I can’t recommend this course enough.

This was unquestionably the best course I had the honor of attending.

 

Fabius
Corelan Advanced

Can’t speak highly enough of Peter’s trainings. I picked up tricks in his advanced heap course that clearly came from decades of hands on exploit writing experience. Something unique in an industry often preoccupied with hoarding knowledge or packaging/selling impractical academic info an autodidact could find on google on their own.

Forest Orr
Corelan Advanced

If you’re going to take the bootcamp please note that it is intense. Peter does an excellent job of thoroughly going through all of the concepts. He makes it’s a priority to answers all of your questions — was very supportive throughout the entire boot camp.

Highly recommend!!

Kolby Wheeler
Corelan Bootcamp

The Corelan Advanced training was very well structured. Peter spends a great amount of time going over the heap and heap internals before touching a single exploit (over half of the class covers the heap internals) to make sure you have a very thorough understanding of the bug class, and the exploit. If are interested in the Windows Heap I HIGHLY recommend taking this course. Finally unlike a lot of other courses that just give you a few bugs and 1 or 2 labs, Peter provides students with roughly 2 years worth of “homework” assignments where you get to apply the knowledge you gained from the class into real world exploitation scenarios.

Ali S. Ahmad
Corelan Advanced

This was my first exploit dev course and before entering the room on the first day I thought I already knew a bit about how stack buffer overflow worked.
The truth is : I didn’t. With Peter’s training you don’t only write exploits, you understand all the underlying mechanisms.
II’m now able to say that I know what a stack buffer overflow is, I know what happens when a shell pops in metasploit.
After taking Peter’s bootcamp, NOP sleds won’t be part of your life anymore !

Julien
Corelan Bootcamp