This track is the foundation under our Windows exploitation work. Kernel driver research, crash triage and exploit development all assume fluency with Windows internal structures and with WinDbg, and this is where that fluency is built.
Students planning to take Windows Exploit Development 3, which covers kernel driver vulnerability research, benefit considerably from Windows Internals and from Windows Live and Crash Dump Analysis beforehand.
Recommended Order
4 courses · 130 hoursThe systems knowledge that everything else on Windows rests on. Take the programming courses in order; Windows Internals can be taken at any point, though it lands better once you have written code against the Windows API.
C Windows System Programming 1
Practical experience with Windows C system programming and the associated Windows topics needed to write your own programs. Covers memory management, I/O operations and the programming concepts that lead into kernel-level work.
C Windows System Programming 2
The direct continuation of part 1, extending both the programming techniques and the Windows subsystems covered, so students can keep expanding their own tooling independently.
Windows Internals
An intensive course on Windows internal structures and their applicability to programming and reverse engineering. The structures covered here are the ones you meet constantly when reversing drivers and writing kernel exploits.
Windows Live and Crash Dump Analysis
Intensive coverage of WinDbg for analysing live systems and crash dumps, including environment and kernel debugging setup, plus the Windows Internals concepts needed to interpret what you see.
Dates and enrolment
Scheduled dates for every course in this track are listed on the training page, together with format, payment and enrolment details.