Course curriculum

    1. Important Information

    2. Initial Theory

    3. Initial Theory Pt.2

    4. Winafl Challenge pt.1

    5. Winafl Challenge pt.2 - Optimization

    6. Importance of Coverage

    7. Initial Theory Pt.3

    8. Initial Theory Pt.4

    9. Experience Survey

    1. Real-target fuzzing (+ Snapshot Fuzzing) Theory

    2. Real Target Fuzzing pt1

    3. Initial Harness

    4. Real Target Fuzzing pt2

    5. Real Target Fuzzing pt3

    6. Real Target Fuzzing pt4

    7. Real Target Fuzzing pt5

    1. Real Target Fuzzing pt6

    2. Evtfuzz Solution Sample (pt6)

    3. Real Target -- Snapshot Fuzzing (Harness Setup)

    4. FileHook_SHMEM Files

    5. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.1)

    6. Real Target -- Snapshot Fuzzing (targets folder for what-the-fuzz)

    7. Real Target - what-the-fuzz source + fuzzer_eventviewer

    8. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.2)

    9. Real Target -- Snapshot Fuzzing (what-the-fuzz pt.3)

    10. Real Target -- Nyx Intro

    11. Real Target -- Nyx Files

    12. Real Target -- Nyx Fuzzing

    13. Experience Survey 2

    1. Logic Vulnerabilities (+ Live Examples)

    2. Misc Tooling

    3. Driver Target Challenge

    4. Identifying the Issue (Trend Micro Driver)

    5. Solution (Driver Target Challenge)

    6. IOCTLDump Github

    7. Driver Hooking + 0day (Logic) Challenge

    8. Additional content survey

    1. Assigment: Chef + Salt Challenge

    2. Assignment: Trend Micro Fuzzing

    1. Bonus (Fuzzing with Nyx)

About this course

  • $3,100.00
  • 40 lessons
  • Learn to find 0-days in arbitrary Windows software
  • 12-month access to the course

Learn about snapshot-fuzzing real-world Windows targets & finding logic 0-days

Continually updated over time to reflect state-of-the-art Windows 0-day hunting techniques

Course Benefits

A tiny portion of the benefits you receive with this course

  • Beginner & Advanced content, with live-demonstrations, real targets & covering the entire 0 to 0-day process

  • Community pages to engage with discussions between peers & instructor, with ongoing support after the course & extra workshops / live Q&A sessions

  • (Optional) Assessments & completions certificates to show you've retained the information presented and can reliably find 0-days in arbitrary Windows targets

  • Frequently updated -- access the latest in 0-day research techniques and tools

Student Reviews

View what some of our previous students thought of our course

5 star rating

One of a kind

Huw Pigott

Self paced deep dive into Windows fuzzing and internals with hands on examples. Well worth the cost!

Self paced deep dive into Windows fuzzing and internals with hands on examples. Well worth the cost!

Read Less
5 star rating

Amazing course !

Ahmed Abdellatif

This is a really good training to help you start your journey into VR and Snapshot Fuzzing world, Highly recommended

This is a really good training to help you start your journey into VR and Snapshot Fuzzing world, Highly recommended

Read Less
5 star rating

A Course that Truly Encapsulated Vulnerability Research & Fuzzing

Jason Villaluna

Informative and practical theories to get started with Windows Fuzzing and Vulnerability Research. Great set of hands-on exercises to absorb and practice the concepts. This course benefits someone like me to get into this field of expertise. Not o...

Read More

Informative and practical theories to get started with Windows Fuzzing and Vulnerability Research. Great set of hands-on exercises to absorb and practice the concepts. This course benefits someone like me to get into this field of expertise. Not only is the course packed with gems, but the instructor is very knowledgeable and helpful.

Read Less
5 star rating

Comprehensive, hard hitting and feature packed

Blake Steven

This training demystified all of my outstanding questions I had around open-source software Fuzzing. I'm really pleased the content was around IDA Pro and modern Windows OS. Both user mode and kernel mode are covered so you'll be confident to atta...

Read More

This training demystified all of my outstanding questions I had around open-source software Fuzzing. I'm really pleased the content was around IDA Pro and modern Windows OS. Both user mode and kernel mode are covered so you'll be confident to attack anything and everything. The guided walkthroughs and exercises are well explained and also contain whiteboard draw ups as well as written content. I would highly recommend this course both in person and/or on-demand.

Read Less
5 star rating

Great Explanation

Rad K

Really enjoyed this course, hands-on with clear-cut practical examples that have helped me to fuzz my own targets afterwards. Great explanations and analogies on Windows internals and walkthroughs on replicable examples.

Really enjoyed this course, hands-on with clear-cut practical examples that have helped me to fuzz my own targets afterwards. Great explanations and analogies on Windows internals and walkthroughs on replicable examples.

Read Less
5 star rating

Great course for those with and without knowledge vuln research and fuzzing skills

David Mulligan

Sat the course knowing very little (nothing really) about fuzzing and some basic vuln research skills. It was great to re-cover my vuln hunting knowledge as Chris showed I had some gaps in the basics, and it was great to fill those in. The fuz...

Read More

Sat the course knowing very little (nothing really) about fuzzing and some basic vuln research skills. It was great to re-cover my vuln hunting knowledge as Chris showed I had some gaps in the basics, and it was great to fill those in. The fuzzing was completely new to me and some of the concepts and techniques, particularly the coding needed to be repeated a couple of times, but the great thing about the course is you can do that!! So, I went from zero knowledge on fuzzing to being able to write my own harness. Now I just need a more powerful machine to run it on. The hypervisor fuzzing took it to a new level and something I had not even considered or thought about before. This course introduced those topics and more. Even down to thinking about how you optimise your code to eek out more performance. Great course would definitely recommend :)

Read Less
5 star rating

Excellent overview and deep dive

brett s

This course provides an excellent overview and at the same time a sufficiently deep dive that you'll really feel you can now continue forward on your own. Some of the fuzzing concepts were brand new to me and introduced them in a way to make them ...

Read More

This course provides an excellent overview and at the same time a sufficiently deep dive that you'll really feel you can now continue forward on your own. Some of the fuzzing concepts were brand new to me and introduced them in a way to make them accessible, with hands-on examples and tooling. Highly recommend.

Read Less
5 star rating

Comprehensive course with a great instructor

Liam D'Ath

I took this course with some pretty beginner RE and intermediate fuzzing experience on Windows and came out of it with the knowledge and practical skills to harness pretty much any target in Windows and find bugs. Additionally, the logic bugs and ...

Read More

I took this course with some pretty beginner RE and intermediate fuzzing experience on Windows and came out of it with the knowledge and practical skills to harness pretty much any target in Windows and find bugs. Additionally, the logic bugs and typical memory corruption bugs found in Windows being explained were really valuable and seeing how the instructor debugged and reversed whilst harnessing a target was really helpful. The instructor is really nice and understanding and will go above and beyond to help you if you get stuck and explain whats wrong which was extremely helpful!

Read Less
5 star rating

Really Informative

Jack Maginnes

I have really enjoyed this course so far. While I have not fully completed it, I picked it up for 20% off on Black Friday and have been working through it a bit at a time. Overall I think Christopher does an excellent job breaking down complex tec...

Read More

I have really enjoyed this course so far. While I have not fully completed it, I picked it up for 20% off on Black Friday and have been working through it a bit at a time. Overall I think Christopher does an excellent job breaking down complex technical topics into easy-to-understand explanations. I would recommend this course to anyone who is looking to better understand VR through the lens of fuzzing.

Read Less
5 star rating

Unique and detailed content

Ara E

The course includes unique and in-depth content of fuzzing black-box binaries. hopefully I was successful to attend the course to see how hard targets will be approached for fuzzing, from complete reverse engineering and passing roadblocks to deve...

Read More

The course includes unique and in-depth content of fuzzing black-box binaries. hopefully I was successful to attend the course to see how hard targets will be approached for fuzzing, from complete reverse engineering and passing roadblocks to develop professional harnesses with performance in mind for fuzzing. Absolutely recommended for the people who wants to learn fuzzing and reversing in a detailed and practical way .

Read Less