This track takes a student from the fundamentals of Assembly to original vulnerability research on Windows kernel drivers and modern browsers. It is the same progression our own researchers follow, and it maps directly onto the work described in our research articles.
You do not have to take every course. If you already write exploits and want kernel or browser research specifically, the later courses can be taken on their own — contact us and we will confirm whether your background fits.
Recommended Order
6 courses · 190 hoursThis is our deepest track and the one closest to what we do in daily research. It moves from writing a first stack overflow to finding original bugs in kernel drivers. Assembly is a hard prerequisite — everything after it assumes you can read disassembled code fluently.
Assembly x64/x86
All the Assembly concepts used in reverse engineering, malware analysis and exploit development. Covers the instructions and architectural details needed to read and understand disassembled code. Required before any exploit development course.
Windows Exploit Development 1
A solid introduction to exploit development on Windows, taught entirely with WinDbg. Covers Windows protections, lab setup, basic buffer overflows, SEH exploitation, writing and customising egg hunters for different Windows versions, Unicode exploits, and ROP for bypassing DEP.
Windows Exploit Development 2
The logical continuation of Exploit Development 1, focused on heap vulnerabilities and the exploitation of applications such as browsers. Students learn to write exploits using heap spraying techniques.
Secure Code
Secure code lifecycle management and the concepts needed to design and evaluate software security in a corporate context. Recommended before the fuzzing and vulnerability research courses, which assume you can recognise defective code patterns.
Fuzzing for Vulnerability Research
Foundations and practical fuzzing techniques applied on Linux and Windows systems. Fuzzing is one of the most valuable resources for finding vulnerabilities in modern software, and this course is the bridge between reading code and discovering original bugs.
Windows Exploit Development 3
A natural sequence from Exploit Development 1 and 2, Secure Code and Fuzzing. Provides the concepts, architecture and practical techniques for vulnerability research on Windows kernel drivers, along with the exploitation techniques involved.
Certification
- Blackstorm Exploit Developer Associate — after Windows Exploit Development 1 and 2
- Blackstorm Exploit Developer Professional — after Windows Exploit Development 3
Dates and enrolment
Scheduled dates for every course in this track are listed on the training page, together with format, payment and enrolment details.