👉🏼 NEW - Bring Corelan Training to you, show your interest here 👈🏼
I had the chance to take the Corelan Heap Masterclass. It was a great course that allow to demystify heap exploitation. Peter explained really well the key concepts and the methodology needed and show practical use cases that can be applied to real life situations. The course was really dense but Peter successfully make it fun and easy to follow. I highly recommend this training.
This training was glorious.
The content is packed with interesting information that expanded my knownledge of the Windows Heap and gave me a lot of new ideas of research to do. The information is shared in a structured way that is easier to understand than what we can find on the Internet and it clear away some misconception that one can have about how the heap works.
The four days of the training are needed except if you already are familiar with some of the material. There is a lot to cover on the subject, so do not plan anything on the evening of the training. Homeworks are a real thing in this training and are a must if one want the information covered to stick.
I highly recommend this training to anyone interested into writing exploits, even if your focus is not particularly related to heap bugs. It is even better if you do it as a team, like a kind of team building for person that enjoy a challenge.
Thanks Peter!
Peter explained the key concepts of heap exploitation very well. We did practice méthodologies on multiple real life interesting scenarios. The course in 4 days was quite challenging but pleasant and open minding.
After years of trainings, CTFs, classes, and practice binaries around stack exploits, everything about the heap was still mysterious dark magic to me. A lot of people who had taken high-level Offensive Security courses strongly recommended taking Corelan’s Heap exploit class and said it was a key component of giving them the knowledge needed to succeed at exploit dev and high-level OffSec classes. After completing the Heap exploit class, I have to agree – Peter clearly explained the Heap using terms that made perfect sense to me with my knowledge of the deterministic stack, and shed light on why Heap exploits are harder for software and OS developers to prevent. What was previously dark magic became a simple matter of thinking differently about concepts and structures I already knew. Peter also understands the value of practice and doesn’t leave students hanging after the end of class – he provides a lot of guidance on where to go from here as well as offering ongoing support via Discord. Of all the cybersecurity classes I have taken, this is THE class that goes the extra mile to set students up for longterm success. This class was very, very, very worth the time & money. As I write this, a handful of hours after the end of the last day, my brain has melted, but I can’t wait to wake up tomorrow, review the slides and my notes, and get started on the follow-up exercises.
I attended the Corelan Expert-level Stack class; it was my third training in exploit development, following the OSCP and GXPN courses. This one was very different—in a good way—because at first, you might think that you don’t have the skill level or aren’t smart enough to follow along. However, the training materials are very well structured, and I really enjoyed Peter’s teaching style, which was both studious and laid-back. From the first to the last day, the complexity increases, but you (almost) never feel it’s beyond reach. What I especially appreciated was that there were no gray areas. If specific steps were needed to complete an exercise, Peter explained both the ‘why’ and ‘how,’ so you never felt like you were missing key details needed to understand the material. Thank you Peter for the awesome training!
I had the chance to take the Expert-level Stack class. Before the class I only had experience with very basic PE stack buffer overflows. Super great content from learning Windows internals basics to DEP and ASLR bypasses for stack buffer exploitation! I will definitly take the heap course if I have the chance to!
Peter’s Expert-level STACK training in just four days was outstanding! The course was perfectly paced, making even complex topics easy to follow without feeling rushed. The high-quality training materials provided clear, practical insights, helping me grasp the subject thoroughly. I highly recommend this course for anyone looking to master stack buffer overflow quickly and effectively!
I attended the stack buffer overflow course in October 2024. The duration of 4 days was not too much. The course balances theory and practice. Peter was a really good and pleasant teacher.
I attended the HEAP masterclass at Brucon 2024 and was greatly impressed by the ease with which Peter managed to get so much information into such little time. The course has a good theory-practice balance where each exercise is there to prove a point. The course starts from Windows 7 only to lead towards Windows 11 and if you have some idea of how the heap works then you can figure out why. Honestly, I didn’t but i just trusted the process and was not disappointed at all! 5/5 recommend it
I was able to take the Heap class a month after I took the Stack class. I am still fairly new to overflows and binary exploitation in general, but thanks to these two classes, I feel like I now have a very solid jumping off point. I probably would have been able to get more from the class of I were already knowledgeable in the subject matter, but thankfully Peter has provided a way to help you after the class ends and provides lots of homework to help further our skills even after the class has ended. Well worth the cost of entry!