Skip to main content
The Cyber Security: ethical hacking and cyber security training, Canada
Register
Advanced

Advanced Penetration Testing and Exploit Writing

This course is where testing turns into exploit development. You move past running other people's tools into advanced network attacks, cryptographic weaknesses, and the Linux and Windows exploitation fundamentals that let you understand a vulnerability well enough to write for it.

Everything runs in the academy lab under written authorization. You build from stack fundamentals toward working exploits, and you finish able to read a crash, reason about memory, and craft a reliable proof of concept.

Duration
12 weeks
Format
Live online, instructor-led
Prerequisites
Enterprise Penetration Testing
Class size
Capped at 12 learners
Advanced Penetration Testing and Exploit Writing

What you will be able to do

  • Carry out advanced network attacks and chain weaknesses across hosts
  • Recognize and exploit common cryptographic weaknesses
  • Read a crash in a debugger and reason about memory and registers
  • Write a working stack overflow exploit on Linux
  • Write a reliable stack overflow exploit on Windows
  • Handle bad characters, encoding and protections in an exploit
  • Document root cause and disclose an exploitable finding responsibly

Course outline

6 modules

  • Attacking network protocols and services
  • Man-in-the-middle and relay techniques
  • Bypassing network segmentation
  • Chaining weaknesses across a network

What you need before you start

  • Completion of Enterprise Penetration Testing or equivalent
  • Comfort with a scripting language, ideally Python
  • Willingness to work in a debugger and read assembly
  • Patience for detailed, iterative technical work

Who this course is for

  • Penetration testers who want to write their own exploits
  • Testers preparing for hands-on exams such as the OSCP
  • Security researchers starting in vulnerability research
  • Engineers who want to understand exploitation deeply

Where this leads

Prepares you for

OSCP

Awarded by OffSec

The OSCP is awarded by OffSec after you pass its practical exam, not by the academy. This course develops the debugging, exploitation and buffer overflow skills the exam includes, and takes you further into exploit writing than the certification requires.

Questions about this course

More in offensive security

Ready to launch your cyber security career?

Join the next live online cohort. No experience required, just bring the curiosity.

Register nowCall 1 (647) 547-0942