Vulnerability Research & Fuzzing
A complete introduction to finding 0-days on Windows, covering static and dynamic manual approaches alongside state-of-the-art snapshot fuzzing techniques with multiple walkthroughs of real live 0-days.
Important Information
Initial Theory
Initial Theory Pt.2
Winafl Challenge pt.1
Winafl Challenge pt.2 - Optimization
Importance of Coverage
Initial Theory Pt.3
Initial Theory Pt.4
Experience Survey
Real-target fuzzing (+ Snapshot Fuzzing) Theory
Real Target Fuzzing pt1
Initial Harness
Real Target Fuzzing pt2
Real Target Fuzzing pt3
Real Target Fuzzing pt4
Real Target Fuzzing pt5
Real Target Fuzzing pt6
Evtfuzz Solution Sample (pt6)
Real Target -- Snapshot Fuzzing (Harness Setup)
FileHook_SHMEM Files
Real Target -- Snapshot Fuzzing (what-the-fuzz pt.1)
Real Target -- Snapshot Fuzzing (targets folder for what-the-fuzz)
Real Target - what-the-fuzz source + fuzzer_eventviewer
Real Target -- Snapshot Fuzzing (what-the-fuzz pt.2)
Real Target -- Snapshot Fuzzing (what-the-fuzz pt.3)
Real Target -- Nyx Intro
Real Target -- Nyx Files
Real Target -- Nyx Fuzzing
Experience Survey 2
Logic Vulnerabilities (+ Live Examples)
Misc Tooling
Driver Target Challenge
Identifying the Issue (Trend Micro Driver)
Solution (Driver Target Challenge)
IOCTLDump Github
Driver Hooking + 0day (Logic) Challenge
Additional content survey
Assigment: Chef + Salt Challenge
Assignment: Trend Micro Fuzzing
Bonus (Fuzzing with Nyx)
Continually updated over time to reflect state-of-the-art Windows 0-day hunting techniques
A tiny portion of the benefits you receive with this course
Beginner & Advanced content, with live-demonstrations, real targets & covering the entire 0 to 0-day process
Community pages to engage with discussions between peers & instructor, with ongoing support after the course & extra workshops / live Q&A sessions
(Optional) Assessments & completions certificates to show you've retained the information presented and can reliably find 0-days in arbitrary Windows targets
Frequently updated -- access the latest in 0-day research techniques and tools
View what some of our previous students thought of our course
Self paced deep dive into Windows fuzzing and internals with hands on examples. Well worth the cost!
Self paced deep dive into Windows fuzzing and internals with hands on examples. Well worth the cost!
Read LessThis is a really good training to help you start your journey into VR and Snapshot Fuzzing world, Highly recommended
This is a really good training to help you start your journey into VR and Snapshot Fuzzing world, Highly recommended
Read LessInformative and practical theories to get started with Windows Fuzzing and Vulnerability Research. Great set of hands-on exercises to absorb and practice the concepts. This course benefits someone like me to get into this field of expertise. Not o...
Read MoreInformative and practical theories to get started with Windows Fuzzing and Vulnerability Research. Great set of hands-on exercises to absorb and practice the concepts. This course benefits someone like me to get into this field of expertise. Not only is the course packed with gems, but the instructor is very knowledgeable and helpful.
Read LessThis training demystified all of my outstanding questions I had around open-source software Fuzzing. I'm really pleased the content was around IDA Pro and modern Windows OS. Both user mode and kernel mode are covered so you'll be confident to atta...
Read MoreThis training demystified all of my outstanding questions I had around open-source software Fuzzing. I'm really pleased the content was around IDA Pro and modern Windows OS. Both user mode and kernel mode are covered so you'll be confident to attack anything and everything. The guided walkthroughs and exercises are well explained and also contain whiteboard draw ups as well as written content. I would highly recommend this course both in person and/or on-demand.
Read LessReally enjoyed this course, hands-on with clear-cut practical examples that have helped me to fuzz my own targets afterwards. Great explanations and analogies on Windows internals and walkthroughs on replicable examples.
Really enjoyed this course, hands-on with clear-cut practical examples that have helped me to fuzz my own targets afterwards. Great explanations and analogies on Windows internals and walkthroughs on replicable examples.
Read LessSat the course knowing very little (nothing really) about fuzzing and some basic vuln research skills. It was great to re-cover my vuln hunting knowledge as Chris showed I had some gaps in the basics, and it was great to fill those in. The fuz...
Read MoreSat the course knowing very little (nothing really) about fuzzing and some basic vuln research skills. It was great to re-cover my vuln hunting knowledge as Chris showed I had some gaps in the basics, and it was great to fill those in. The fuzzing was completely new to me and some of the concepts and techniques, particularly the coding needed to be repeated a couple of times, but the great thing about the course is you can do that!! So, I went from zero knowledge on fuzzing to being able to write my own harness. Now I just need a more powerful machine to run it on. The hypervisor fuzzing took it to a new level and something I had not even considered or thought about before. This course introduced those topics and more. Even down to thinking about how you optimise your code to eek out more performance. Great course would definitely recommend :)
Read LessThis course provides an excellent overview and at the same time a sufficiently deep dive that you'll really feel you can now continue forward on your own. Some of the fuzzing concepts were brand new to me and introduced them in a way to make them ...
Read MoreThis course provides an excellent overview and at the same time a sufficiently deep dive that you'll really feel you can now continue forward on your own. Some of the fuzzing concepts were brand new to me and introduced them in a way to make them accessible, with hands-on examples and tooling. Highly recommend.
Read LessI took this course with some pretty beginner RE and intermediate fuzzing experience on Windows and came out of it with the knowledge and practical skills to harness pretty much any target in Windows and find bugs. Additionally, the logic bugs and ...
Read MoreI took this course with some pretty beginner RE and intermediate fuzzing experience on Windows and came out of it with the knowledge and practical skills to harness pretty much any target in Windows and find bugs. Additionally, the logic bugs and typical memory corruption bugs found in Windows being explained were really valuable and seeing how the instructor debugged and reversed whilst harnessing a target was really helpful. The instructor is really nice and understanding and will go above and beyond to help you if you get stuck and explain whats wrong which was extremely helpful!
Read LessI have really enjoyed this course so far. While I have not fully completed it, I picked it up for 20% off on Black Friday and have been working through it a bit at a time. Overall I think Christopher does an excellent job breaking down complex tec...
Read MoreI have really enjoyed this course so far. While I have not fully completed it, I picked it up for 20% off on Black Friday and have been working through it a bit at a time. Overall I think Christopher does an excellent job breaking down complex technical topics into easy-to-understand explanations. I would recommend this course to anyone who is looking to better understand VR through the lens of fuzzing.
Read LessThe course includes unique and in-depth content of fuzzing black-box binaries. hopefully I was successful to attend the course to see how hard targets will be approached for fuzzing, from complete reverse engineering and passing roadblocks to deve...
Read MoreThe course includes unique and in-depth content of fuzzing black-box binaries. hopefully I was successful to attend the course to see how hard targets will be approached for fuzzing, from complete reverse engineering and passing roadblocks to develop professional harnesses with performance in mind for fuzzing. Absolutely recommended for the people who wants to learn fuzzing and reversing in a detailed and practical way .
Read Less