Course curriculum

    1. Important Information

    2. Initial Theory

    3. Winafl Challenge

    4. Winafl Solution

    5. Initial Theory Pt.2

    6. Importance of Coverage

    7. Experience Survey

    1. Real-target fuzzing (+ Snapshot Fuzzing) Theory

    2. Real Target Fuzzing pt1

    3. Initial Harness

    4. Real Target Fuzzing pt2

    5. Real Target Fuzzing pt3

    6. Real Target Fuzzing pt4

    7. Real Target Fuzzing pt5

    1. Real Target Fuzzing pt6

    2. Real Target -- Snapshot Fuzzing (Harness Setup)

    3. FileHook_SHMEM Files

    4. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.1)

    5. Real Target -- Snapshot Fuzzing (targets folder for what-the-fuzz)

    6. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.2)

    7. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.3)

    8. Experience Survey Day (Two + Three)

    1. Logic Vulnerabilities (+ Live Examples)

    2. Misc Tooling

    3. Driver Target Challenge

    4. Identifying the Issue (Trend Micro Driver)

    5. Solution (Driver Target Challenge)

    6. IOCTLDump Github

    7. Driver Hooking + 0day (Logic) Challenge

    8. Chef + Salt

    9. Additional content survey

About this course

  • $3,800.00
  • 32 lessons
  • 16.5 hours of video content
  • Learn to find 0-days in arbitrary Windows software

Learn about snapshot-fuzzing real-world Windows targets & finding logic 0-days

Continually updated over time to reflect state-of-the-art Windows 0-day hunting techniques

Student or Military?

You may be eligible for course discounts!

Eligibility depends on proof of status -- enquire via email below.