If you want to dive into modern exploitation, this is for you.

Best training I have attended so far

I have just finished the Corelan advanced training done by Peter Van Eeckhoutte. What can I say, best training I have attended so far. Peter is dedicated, passionate and the way he teaches you is great. There is no such way of learning something than trying. Nothing is given during the training, you will fail many times but once you achieve something you will know why it worked and how it works behind the scene. You don't just learn how to launch a bunch of tools. Painful experiences are always better remembered 😉

Grégory Draperi - Corelan Advanced - Hack In Paris 2019

Corelan Training

5

2019-06-19T13:05:02+02:00

Grégory Draperi - Corelan Advanced - Hack In Paris 2019

I have just finished the Corelan advanced training done by Peter Van Eeckhoutte. What can I say, best training I have attended so far. Peter is dedicated, passionate and the way he teaches you is great. There is no such way of learning something than trying. Nothing is given during the training, you will fail many times but once you achieve something you will know why it worked and how it works behind the scene. You don't just learn how to launch a bunch of tools. Painful experiences are always better remembered 😉

https://www.corelan-consulting.com/index.php/testimonials/best-training-i-have-attended-so-far/

By far the best technical course I have ever attended !

This is by far the best technical course I have ever attended. Peter explains things in an in-depth manner that is easy to understand. His training style is brilliant. I highly recommend attending his training if you're interested in exploit development. It's not for the faint of heart, but with determination, you'll learn the techniques.

Rick Oates, Corelan Bootcamp, Sydney

Corelan Training

5

2019-03-24T09:52:09+01:00

Rick Oates, Corelan Bootcamp, Sydney

This is by far the best technical course I have ever attended. Peter explains things in an in-depth manner that is easy to understand. His training style is brilliant. I highly recommend attending his training if you're interested in exploit development. It's not for the faint of heart, but with determination, you'll learn the techniques.

https://www.corelan-consulting.com/index.php/testimonials/by-far-the-best-technical-course-i-have-ever-attended/

Many thanks Peter

Peter managed to exceed my expectations that I had out of this course. I had previously attended the Bootcamp training, with the intention to continue with the Advanced course so as to level-up my skills, but more importantly to improve my thought processes into exploit development. We delved into how heap management works, and leveraging its functionality to exploit bugs mainly in browser software. We explored proof of concepts of Use-After-Free conditions, Memory Leaks, Heap Feng Shui and precise Heap Spraying by performing quite intense, long, and instrumental labs. Personally, the real journey begins after the end of this training, as Peter provided the tools/ ideas/ examples/ thought-process/ inspiration for further research on the exciting path of modern software exploitation. Peter has been a truly inspiring mentor during the course and made everything possible to ensure that the core concepts are understood by the whole class. I am very glad that I had the opportunity to attend the Advanced Course, and I would definitely attend any other future training done by Peter. Many thanks Peter!

Nick, Corelan Advanced, Hack In Paris 2017

Corelan Training

5

2019-03-24T07:42:50+01:00

Nick, Corelan Advanced, Hack In Paris 2017

Peter managed to exceed my expectations that I had out of this course. I had previously attended the Bootcamp training, with the intention to continue with the Advanced course so as to level-up my skills, but more importantly to improve my thought processes into exploit development. We delved into how heap management works, and leveraging its functionality to exploit bugs mainly in browser software. We explored proof of concepts of Use-After-Free conditions, Memory Leaks, Heap Feng Shui and precise Heap Spraying by performing quite intense, long, and instrumental labs. Personally, the real journey begins after the end of this training, as Peter provided the tools/ ideas/ examples/ thought-process/ inspiration for further research on the exciting path of modern software exploitation. Peter has been a truly inspiring mentor during the course and made everything possible to ensure that the core concepts are understood by the whole class. I am very glad that I had the opportunity to attend the Advanced Course, and I would definitely attend any other future training done by Peter. Many thanks Peter!

https://www.corelan-consulting.com/index.php/testimonials/many-thanks-peter/

Excellent Training!

Loads of excellent reviews. Mine would not be different. Peter has a very rare talent to break/research the stuff and even more rare talent to be a great teacher. He can explain very complicated things in a clear way and guide you through more complex situations. The aim of this course is not to show tips and tricks, but build fundamental knowledge on how to attack heap. Loads of exercises will give you a chance to master exploit dev skills. I also enjoyed his insights and thoughts about research, ways to upskill and other things.

Thank you Peter for doing great job! All the best!

Denis, Corelan Advanced, BruCON Oct 2018

Corelan Training

5

2019-03-24T07:39:41+01:00

Denis, Corelan Advanced, BruCON Oct 2018

Loads of excellent reviews. Mine would not be different. Peter has a very rare talent to break/research the stuff and even more rare talent to be a great teacher. He can explain very complicated things in a clear way and guide you through more complex situations. The aim of this course is not to show tips and tricks, but build fundamental knowledge on how to attack heap. Loads of exercises will give you a chance to master exploit dev skills. I also enjoyed his insights and thoughts about research, ways to upskill and other things. Thank you Peter for doing great job! All the best!

https://www.corelan-consulting.com/index.php/testimonials/excellent-training/

This training is top-notch and to-the-point.

No bullshit, Peter knows the game. This training is top-notch and to-the-point. I would recommend it for every hacker who wants to improve his exploit writing skills.

Yaniv Miron aka Lament, Corelan Bootcamp, Hackfest Québec

Corelan Training

5

2019-03-24T10:03:40+01:00

Yaniv Miron aka Lament, Corelan Bootcamp, Hackfest Québec

No bullshit, Peter knows the game. This training is top-notch and to-the-point. I would recommend it for every hacker who wants to improve his exploit writing skills.

https://www.corelan-consulting.com/index.php/testimonials/this-training-is-top-notch-and-to-the-point/

I can highly recommend this course

I attended Peters Bootcamp session in Stockholm. My expectations were high for this course and they were met and surpassed!

The entire course is focused on 32bit (last day had a session on more 64bit specifics) and is a excellent primer for those who wants to get into exploit development on Windows.

Peter managed to demystify ROPs and the MONA tool. Peters teaching skills are top notch and documentation and labs are one of the best.

I can highly recommend this course. I am looking forward to attend to the Advanced course.

Michael, Private class, Stockholm Dec 2020

Corelan Training

5

2020-12-14T09:06:50+01:00

Michael, Private class, Stockholm Dec 2020

I attended Peters Bootcamp session in Stockholm. My expectations were high for this course and they were met and surpassed! The entire course is focused on 32bit (last day had a session on more 64bit specifics) and is a excellent primer for those who wants to get into exploit development on Windows. Peter managed to demystify ROPs and the MONA tool. Peters teaching skills are top notch and documentation and labs are one of the best. I can highly recommend this course. I am looking forward to attend to the Advanced course.

https://www.corelan-consulting.com/index.php/testimonials/i-can-highly-recommend-this-course/

The course was impressive

The course was impressive. The explanations of the theory were very clear and the exercises selected were perfect (each exercise was unique). You can notice that the trainer prepared a lot the course and that he is very experienced as teacher.
Another very good part of the course is the advice of the trainer. You can ask him all your doubts!
This course really improved my skills as Exploits developer.

Javier, Corelan Bootcamp, RootedCON Madrid

Corelan Training

5

2019-03-24T09:51:25+01:00

Javier, Corelan Bootcamp, RootedCON Madrid

The course was impressive. The explanations of the theory were very clear and the exercises selected were perfect (each exercise was unique). You can notice that the trainer prepared a lot the course and that he is very experienced as teacher. Another very good part of the course is the advice of the trainer. You can ask him all your doubts! This course really improved my skills as Exploits developer.

https://www.corelan-consulting.com/index.php/testimonials/the-course-was-impressive/

Don’t think twice

This course was by far one of the most challenging courses I have taken so far, but Corelan does an excellent job of removing the fear of these more advanced topics and won't leave you in the dark during and after the course. I've been utilizing Corelans free research since I got into Exploit Development and when I discovered he offered this course I knew the moment I had the opportunity I had to take it.

I had expectations before going in and all where exceeded. Then again what more can you expect from the man who invented Mona.py and continues to publish research? Don't think twice!

Student (Corelan Advanced) at Columbia, MD - Sept 2019

Corelan Training

5

2019-09-30T02:04:06+02:00

Student (Corelan Advanced) at Columbia, MD - Sept 2019

This course was by far one of the most challenging courses I have taken so far, but Corelan does an excellent job of removing the fear of these more advanced topics and won't leave you in the dark during and after the course. I've been utilizing Corelans free research since I got into Exploit Development and when I discovered he offered this course I knew the moment I had the opportunity I had to take it. I had expectations before going in and all where exceeded. Then again what more can you expect from the man who invented Mona.py and continues to publish research? Don't think twice!

https://www.corelan-consulting.com/index.php/testimonials/dont-think-twice/

I am totally stunned!

I am totally stunned! Never had a training that is so strong in content, engagement and exercises. After a short but clear explanation of a special exploit technique, Peter directly puts you into practice: "Here's a vulnerability, now YOU make it an exploit. You have 60 minutes!" Insane, but you will do it! Peter will not give you the solution. Instead, he challenges you to think it over again, directing you to success. Don't know how to say it in english, but in Germany we would say: "Krasser Kollege!" It will be hard to find a training in the future that can compare with this bootcamp.

Manu Carus, Corelan Bootcamp, Hack In Paris

Corelan Training

5

2019-03-24T10:06:38+01:00

Manu Carus, Corelan Bootcamp, Hack In Paris

I am totally stunned! Never had a training that is so strong in content, engagement and exercises. After a short but clear explanation of a special exploit technique, Peter directly puts you into practice: "Here's a vulnerability, now YOU make it an exploit. You have 60 minutes!" Insane, but you will do it! Peter will not give you the solution. Instead, he challenges you to think it over again, directing you to success. Don't know how to say it in english, but in Germany we would say: "Krasser Kollege!" It will be hard to find a training in the future that can compare with this bootcamp.

https://www.corelan-consulting.com/index.php/testimonials/i-am-totally-stunned/

A hard to find combination that makes this course an absolute value for money!

Great, in depth, analysis of Windows memory management and ingenious ways of using its inner-workings to build working exploits bypassing modern controls.

Peter is a great researcher and trainer. A hard to find combination that makes this course an absolute value for money!

Yiannis Koukouras, TwelveSec M.D, Corelan Advanced, Athens Greece 2020

Corelan Training

5

2020-03-10T17:44:08+01:00

Yiannis Koukouras, TwelveSec M.D, Corelan Advanced, Athens Greece 2020

Great, in depth, analysis of Windows memory management and ingenious ways of using its inner-workings to build working exploits bypassing modern controls. Peter is a great researcher and trainer. A hard to find combination that makes this course an absolute value for money!

https://www.corelan-consulting.com/index.php/testimonials/a-hard-to-find-combination-that-makes-this-course-an-absolute-value-for-money/

Peter is a true professional.

Peter is a true professional. The bootcamp is a perfect mix between theory and practice. Guiding you on a nice and fast pace, the moment you realise you solved the 'rubik's cube'... perfect! So much fun. So many hours in 3 days 🙂

kciredor, Corelan Bootcamp, BruCON

Corelan Training

5

2019-03-24T09:50:40+01:00

kciredor, Corelan Bootcamp, BruCON

Peter is a true professional. The bootcamp is a perfect mix between theory and practice. Guiding you on a nice and fast pace, the moment you realise you solved the 'rubik's cube'... perfect! So much fun. So many hours in 3 days 🙂

https://www.corelan-consulting.com/index.php/testimonials/peter-is-a-true-professional/

Amazing Experience

The Corelan Advanced course was an amazing experience. As someone with prior exploit development experience, Peter's knowledge and explanations of precision heap sprays, and the various heap exploitation topics were very easy to understand and structured wonderfully.

It was a great feeling to finish the browser exploit exercise in class and carefully bypass all the related mitigations without any wayward NOPs/ROP NOPs by being extremely deliberate. I would highly recommend interested students write at least a couple exploits using ROP before considering this course to get the most out of it. Peter was inspiring to work with and a great teacher. Peter put a lot of energy into this, and it seriously showed. I can't wait to continue writing more heap exploits =)

Anonymous, Corelan Advanced, Derbycon

Corelan Training

5

2019-03-24T09:54:38+01:00

Anonymous, Corelan Advanced, Derbycon

The Corelan Advanced course was an amazing experience. As someone with prior exploit development experience, Peter's knowledge and explanations of precision heap sprays, and the various heap exploitation topics were very easy to understand and structured wonderfully. It was a great feeling to finish the browser exploit exercise in class and carefully bypass all the related mitigations without any wayward NOPs/ROP NOPs by being extremely deliberate. I would highly recommend interested students write at least a couple exploits using ROP before considering this course to get the most out of it. Peter was inspiring to work with and a great teacher. Peter put a lot of energy into this, and it seriously showed. I can't wait to continue writing more heap exploits =)

https://www.corelan-consulting.com/index.php/testimonials/amazing-experience/

Awesome class with a very knowledgeable instructor.

Awesome class with a very knowledgeable instructor. Peter does a great job of explaining the material and challenging you so that in the end you really learn a lot from this class. It's a great class even for someone with experience in exploit development. The class is fast paced but still plenty of time to do the labs (10+ hours a day of class time) and learn a lot. Peter is an excellent teacher and explains the concepts very well. Peter's knowledge of the techniques combined with his ability to teach it is what really makes this class worth the money. Highly recommend this class and looking forward to his advanced class in June.

Bryan, Corelan Bootcamp, BruCON

Corelan Training

5

2019-03-24T09:49:16+01:00

Bryan, Corelan Bootcamp, BruCON

Awesome class with a very knowledgeable instructor. Peter does a great job of explaining the material and challenging you so that in the end you really learn a lot from this class. It's a great class even for someone with experience in exploit development. The class is fast paced but still plenty of time to do the labs (10+ hours a day of class time) and learn a lot. Peter is an excellent teacher and explains the concepts very well. Peter's knowledge of the techniques combined with his ability to teach it is what really makes this class worth the money. Highly recommend this class and looking forward to his advanced class in June.

https://www.corelan-consulting.com/index.php/testimonials/awesome-class-with-a-very-knowledgeable-instructor/

This is without a doubt one of the best courses I’ve ever attended.

Corelan did not only develop great content for the course, but Peter is also a very good mentor who can explain complex matters in a clear and understandable way.

I also appreciate that the course was fully packed and that we went on until late in the evening, just to get as much as possible covered, where many other courses tend to end early in the afternoon.

This is without a doubt one of the best courses I've ever attended. Highly recommended!

Koen Bossaert, Corelan Bootcamp, BruCON

Corelan Training

5

2019-03-24T10:09:49+01:00

Koen Bossaert, Corelan Bootcamp, BruCON

Corelan did not only develop great content for the course, but Peter is also a very good mentor who can explain complex matters in a clear and understandable way. I also appreciate that the course was fully packed and that we went on until late in the evening, just to get as much as possible covered, where many other courses tend to end early in the afternoon. This is without a doubt one of the best courses I've ever attended. Highly recommended!

https://www.corelan-consulting.com/index.php/testimonials/this-is-without-a-doubt-one-of-the-best-courses-ive-ever-attended/

I would highly recommend this course anytime!

I enjoyed this course a lot and it opened my mind for the journey towards finding and exploiting browser heap related bugs and not only! One of the most important aspects I found; is that the course is focused to create a way of thinking in how to approach finding and exploiting a certain class of bugs relating to the heap. I believe at this moment, that Peter's class is the fastest way into opening the path towards this journey and I think it is an excellent designed course. In addition, care ensuring that no student gets left behind throughout the days is at the uppermost level, The examples used for the bug exploitation are perfectly chosen and not last the teaching skills and the continuous support impressed me extremely. I would highly recommend this course anytime!

Alex, Corelan Advanced, Singapore March 2018

Corelan Training

5

2019-03-24T07:42:09+01:00

Alex, Corelan Advanced, Singapore March 2018

I enjoyed this course a lot and it opened my mind for the journey towards finding and exploiting browser heap related bugs and not only! One of the most important aspects I found; is that the course is focused to create a way of thinking in how to approach finding and exploiting a certain class of bugs relating to the heap. I believe at this moment, that Peter's class is the fastest way into opening the path towards this journey and I think it is an excellent designed course. In addition, care ensuring that no student gets left behind throughout the days is at the uppermost level, The examples used for the bug exploitation are perfectly chosen and not last the teaching skills and the continuous support impressed me extremely. I would highly recommend this course anytime!

https://www.corelan-consulting.com/index.php/testimonials/corelan-advanced-2/

Do yourself a favour …

I completed Peter's recent Bootcamp/Advanced Exploit Development training held in Sydney, 2019. Having worked in the computer security field for many years I wasn't sure how much I was going to get out of the training but I am so glad I decided to attend as these two training courses were without doubt two of the best training experiences I have had in my career. Peter's ability to teach students of different knowledge/skill level is second to none and his humour and enthusiasm make the long days (i.e.9:00 - 10pm) seem to fly by. His depth of knowledge on Windows heap internals is world class and he provides enough training material and exercises to keep you busy for a least a year! I have no hesitation in recommending both courses to people interested in the field, experienced security professionals and anyone else who wants to experience a truly great educator.

Paul Quirk, Corelan Bootcamp & Advanced, Sydney Australia 2019

Corelan Training

5

2019-11-29T16:19:46+01:00

Paul Quirk, Corelan Bootcamp & Advanced, Sydney Australia 2019

I completed Peter's recent Bootcamp/Advanced Exploit Development training held in Sydney, 2019. Having worked in the computer security field for many years I wasn't sure how much I was going to get out of the training but I am so glad I decided to attend as these two training courses were without doubt two of the best training experiences I have had in my career. Peter's ability to teach students of different knowledge/skill level is second to none and his humour and enthusiasm make the long days (i.e.9:00 - 10pm) seem to fly by. His depth of knowledge on Windows heap internals is world class and he provides enough training material and exercises to keep you busy for a least a year! I have no hesitation in recommending both courses to people interested in the field, experienced security professionals and anyone else who wants to experience a truly great educator.

https://www.corelan-consulting.com/index.php/testimonials/do-yourself-a-favour/

I would definitely recommend this

This was a hardcore but amazing class. I have taken several other courses/learnings on exploits/buffer overflows and always had a difficult time understand the method behind the madness because it was never covered in depth. This class changed that.

He started with a GREAT foundation so you can really understand what is going on and why. I was able to step through the labs and actually understand what was going on each step of the way.

I would definitely recommend this to anyone looking to learn exploit dev.. whether it be to become a better software dev, exploit writer or a better blue teamer.

Schuyler Dorsey, Corelan Bootcamp, Derbycon

Corelan Training

5

2019-03-24T10:01:13+01:00

Schuyler Dorsey, Corelan Bootcamp, Derbycon

This was a hardcore but amazing class. I have taken several other courses/learnings on exploits/buffer overflows and always had a difficult time understand the method behind the madness because it was never covered in depth. This class changed that. He started with a GREAT foundation so you can really understand what is going on and why. I was able to step through the labs and actually understand what was going on each step of the way. I would definitely recommend this to anyone looking to learn exploit dev.. whether it be to become a better software dev, exploit writer or a better blue teamer.

https://www.corelan-consulting.com/index.php/testimonials/i-would-definitely-recommend-this/

Bootcamp filled in certain gaps I had

Even though I was initially planning to register only for the Advanced Course (due to already possessing relevant advanced certifications on exploit development), I am so glad that I made the decision to attend the BootCamp course as well. It definitely filled in certain gaps I had (which the other certs did not truly cover), and prepared me mentally for the next step. I enjoyed every minute of the course, but even though it's now over, I feel that this is the start of a new beginning due to the eye-opening towards certain concepts. Peter has been a truly inspiring mentor during the course, who did not hesitate to devote extra hours, without which I personally would need more time to get to the point myself and the class was, and he made a true effort so that we really understand the root cause of what we were doing. I have already registered for the Advanced Course, and looking forward to more exciting times ahead! Thanks a lot Peter.

Nick, Corelan Bootcamp, BruCON Spring 2017

Corelan Training

5

2019-03-24T07:44:28+01:00

Nick, Corelan Bootcamp, BruCON Spring 2017

Even though I was initially planning to register only for the Advanced Course (due to already possessing relevant advanced certifications on exploit development), I am so glad that I made the decision to attend the BootCamp course as well. It definitely filled in certain gaps I had (which the other certs did not truly cover), and prepared me mentally for the next step. I enjoyed every minute of the course, but even though it's now over, I feel that this is the start of a new beginning due to the eye-opening towards certain concepts. Peter has been a truly inspiring mentor during the course, who did not hesitate to devote extra hours, without which I personally would need more time to get to the point myself and the class was, and he made a true effort so that we really understand the root cause of what we were doing. I have already registered for the Advanced Course, and looking forward to more exciting times ahead! Thanks a lot Peter.

https://www.corelan-consulting.com/index.php/testimonials/bootcamp-filled-in-certain-gaps-i-had/

Highly recommend this training

I have been reading the tutorial from corelan's blog ever since I started my own exploration to security in general. So far this is the best training I ever had compared to SANS and some online courses (Offensive Security and ElearnSecurity, which I paid on my own. From all of the training I had this would be the best!!! I have not seen any trainer use the traditional way of writing things down and let the students explain or participate. It is very interactive so during break you get to discuss and find ways on how to deal or fix the exercise. It is really an eye opener and he will let you think like a researcher. Over all it touches from reversing to exploit development. Again its not 5 days its 3 exciting days with awesome discussions of the latest and the greatest. I highly recommend this training.

Nubianz, Corelan Advanced, Hackfest Québec 2016

Corelan Training

5

2019-03-24T07:45:22+01:00

Nubianz, Corelan Advanced, Hackfest Québec 2016

I have been reading the tutorial from corelan's blog ever since I started my own exploration to security in general. So far this is the best training I ever had compared to SANS and some online courses (Offensive Security and ElearnSecurity, which I paid on my own. From all of the training I had this would be the best!!! I have not seen any trainer use the traditional way of writing things down and let the students explain or participate. It is very interactive so during break you get to discuss and find ways on how to deal or fix the exercise. It is really an eye opener and he will let you think like a researcher. Over all it touches from reversing to exploit development. Again its not 5 days its 3 exciting days with awesome discussions of the latest and the greatest. I highly recommend this training.

https://www.corelan-consulting.com/index.php/testimonials/highly-recommend-this-training/

Great training, attend if you can

This training is amazing. Peter starts with the foundation of all exploiting: the OS and how it talks to the CPU/memory, and how that is important to exploitation. His way of describing complex concepts in simple drawings is amazing and really makes you understand what you are doing. We wrote exploits for all sorts of stuff, and what seemed like magic has been neatly reduced to comprehensible, understandable steps. Long story short, great training, great material, attend if you can.

Martin, Corelan Bootcamp, Zurich March 2020

Corelan Training

5

2020-03-10T13:09:31+01:00

Martin, Corelan Bootcamp, Zurich March 2020

This training is amazing. Peter starts with the foundation of all exploiting: the OS and how it talks to the CPU/memory, and how that is important to exploitation. His way of describing complex concepts in simple drawings is amazing and really makes you understand what you are doing. We wrote exploits for all sorts of stuff, and what seemed like magic has been neatly reduced to comprehensible, understandable steps. Long story short, great training, great material, attend if you can.

https://www.corelan-consulting.com/index.php/testimonials/great-training-attend-if-you-can/

This class blew my mind on multiple levels.

This class blew my mind on multiple levels. I'd recommend it not just to people interested in exploit development and infosec, but also to low-level programmers interested in security, or general developers wanting to have a REAL challenge. I really mean it. I didn't think things like ASLR/DEP bypass could be as simple and elegant as he showed. The material was relevant, recent, and had NOTHING but real world exercises.
But more than that, I was personally inspired by this class too. Peter represents the absolute finest breed of hacker: not just an exploit developer, but an individual who is dedicated to sharing and learning. It's rare to find, let alone be taught by such people. I've spent significant time and research in my own fields, and watching someone display enthusiasm like that is always incredible. If Peter could have gone for another 13 hours straight on Day 1, I think he would have.

Austin Seipp, Corelan Bootcamp, Derbycon

Corelan Training

5

2019-03-24T10:02:51+01:00

Austin Seipp, Corelan Bootcamp, Derbycon

This class blew my mind on multiple levels. I'd recommend it not just to people interested in exploit development and infosec, but also to low-level programmers interested in security, or general developers wanting to have a REAL challenge. I really mean it. I didn't think things like ASLR/DEP bypass could be as simple and elegant as he showed. The material was relevant, recent, and had NOTHING but real world exercises. But more than that, I was personally inspired by this class too. Peter represents the absolute finest breed of hacker: not just an exploit developer, but an individual who is dedicated to sharing and learning. It's rare to find, let alone be taught by such people. I've spent significant time and research in my own fields, and watching someone display enthusiasm like that is always incredible. If Peter could have gone for another 13 hours straight on Day 1, I think he would have.

https://www.corelan-consulting.com/index.php/testimonials/his-class-blew-my-mind-on-multiple-levels/

Well worth the investment!

The Corelan Advanced Exploit Development (CAED) is one of the most challenging and courses I have taken. The depth of information provides a nice baseline for understanding the underlying technologies required to leverage the techniques for successful exploitation. The amount of information covered in the course could fill a semester-long class at a graduate-level CompSci program. Peter did a great job of organizing and delivering this information. The course will give you the knowledge, resource, and examples to further expound your knowledge in Advanced Exploit development. My favorite part of the course is the 6months+ worth of homework along with all the resources like the forums. Well worth the investment!

Gershom Rogers, Corelan Advanced, Columbia MD (USA) - Sept 2019

Corelan Training

5

2019-09-30T02:05:53+02:00

Gershom Rogers, Corelan Advanced, Columbia MD (USA) - Sept 2019

The Corelan Advanced Exploit Development (CAED) is one of the most challenging and courses I have taken. The depth of information provides a nice baseline for understanding the underlying technologies required to leverage the techniques for successful exploitation. The amount of information covered in the course could fill a semester-long class at a graduate-level CompSci program. Peter did a great job of organizing and delivering this information. The course will give you the knowledge, resource, and examples to further expound your knowledge in Advanced Exploit development. My favorite part of the course is the 6months+ worth of homework along with all the resources like the forums. Well worth the investment!

https://www.corelan-consulting.com/index.php/testimonials/well-worth-the-investment/

This class is a must!

It was amazing! This is definitely the best course I have done to date. Peter is extremely knowledgeable and shows great passion for the course. The teaching rate and style is perfect for quick pick up and the course is very hands-on oriented so you start developing exploits very early on in the class. Everything is explained extremely well and the hands-on aspect quickly cements the concepts. I would recommend it to anyone who is interested in the subject or would like to start out in this kind of development. I went from a general understanding in a very vague way to being able to start comprehending the intricacies of the interactions and I very much enjoyed the topics on bypassing the newer protections in windows. All in all, something that was painfully slow to do before hand when I was looking at OSCP, now seems extremely easy.
This class is a must!

Christopher, Corelan Bootcamp, Hackfest Québec

Corelan Training

5

2019-03-24T10:04:22+01:00

Christopher, Corelan Bootcamp, Hackfest Québec

It was amazing! This is definitely the best course I have done to date. Peter is extremely knowledgeable and shows great passion for the course. The teaching rate and style is perfect for quick pick up and the course is very hands-on oriented so you start developing exploits very early on in the class. Everything is explained extremely well and the hands-on aspect quickly cements the concepts. I would recommend it to anyone who is interested in the subject or would like to start out in this kind of development. I went from a general understanding in a very vague way to being able to start comprehending the intricacies of the interactions and I very much enjoyed the topics on bypassing the newer protections in windows. All in all, something that was painfully slow to do before hand when I was looking at OSCP, now seems extremely easy. This class is a must!

https://www.corelan-consulting.com/index.php/testimonials/this-class-is-a-must/

The way Peter puts ideas and concepts together is an inspiration

First I would like to start by thanking Peter for his patience and dedication to answer every question in great details. What separate Peter from other instructors is his methodological and logical approach in delivering the course materials. Hands down, this is the best security training I attended.

Every step is explained with backing theory and clear logical reasons on why we were doing what we were doing to create the exploits. There were no vague answers.

The way Peter puts ideas and concepts together is an inspiration. You may not master every topic discussed right away (as you have to practice, practice and practice) but the main take away is that you have to apply yourself and work hard.

I specifically liked the exercises as they were well-thought out. You will see yourself grasping ideas as you do the exercises yourself (with little help along the way from Peter) which I liked because you will earn knowledge the hard and the right way.

Thank you for a great learning opportunity. What a great person to be around.

Omar Asali, Corelan Bootcamp, Dubai 2019

Corelan Training

5

2019-04-12T16:49:11+02:00

Omar Asali, Corelan Bootcamp, Dubai 2019

First I would like to start by thanking Peter for his patience and dedication to answer every question in great details. What separate Peter from other instructors is his methodological and logical approach in delivering the course materials. Hands down, this is the best security training I attended. Every step is explained with backing theory and clear logical reasons on why we were doing what we were doing to create the exploits. There were no vague answers. The way Peter puts ideas and concepts together is an inspiration. You may not master every topic discussed right away (as you have to practice, practice and practice) but the main take away is that you have to apply yourself and work hard. I specifically liked the exercises as they were well-thought out. You will see yourself grasping ideas as you do the exercises yourself (with little help along the way from Peter) which I liked because you will earn knowledge the hard and the right way. Thank you for a great learning opportunity. What a great person to be around.

https://www.corelan-consulting.com/index.php/testimonials/the-way-peter-puts-ideas-and-concepts-together-is-an-inspiration/

Without question the best training class I have taken

I took the Corelan Advanced class at Derbycon and it is without question the best training class I have taken. Learning from Peter is very insightful. He has a deep understanding of Windows exploitation and can communicate his thoughts and processes clearly. Each lab contains a carefully picked exploit allowing students to focus on the new material without having to figure out too many unrelated tricks and problems. If any student has trouble solving a challenge Peter will sit with them and figure it out. Since he has personally written most of the tools, exploits, and payloads used in class he can spot and resolve errors quickly. He isn't kidding when he says you should get a good sleep the night before, prepare to learn and practice until your eyes close.

Phillip OKeefe, Corelan Advanced, Derbycon

Corelan Training

5

2019-03-24T09:57:55+01:00

Phillip OKeefe, Corelan Advanced, Derbycon

I took the Corelan Advanced class at Derbycon and it is without question the best training class I have taken. Learning from Peter is very insightful. He has a deep understanding of Windows exploitation and can communicate his thoughts and processes clearly. Each lab contains a carefully picked exploit allowing students to focus on the new material without having to figure out too many unrelated tricks and problems. If any student has trouble solving a challenge Peter will sit with them and figure it out. Since he has personally written most of the tools, exploits, and payloads used in class he can spot and resolve errors quickly. He isn't kidding when he says you should get a good sleep the night before, prepare to learn and practice until your eyes close.

https://www.corelan-consulting.com/index.php/testimonials/without-question-the-best-training-class-i-have-taken/

Thank you for the training, Peter!

The training was very consequent and well edited. The harmony of theorems and exercises and the details of the explanations tells about a lot of experience and care of the profession. Also, Peter is very friendly and helpful. This is The Place where you can get real knowledge and mindset for your own research.

Thank you for the training, Peter!

Appleakator, Corelan Advanced, BruCON Oct 2018

Corelan Training

5

2019-03-24T07:38:57+01:00

Appleakator, Corelan Advanced, BruCON Oct 2018

The training was very consequent and well edited. The harmony of theorems and exercises and the details of the explanations tells about a lot of experience and care of the profession. Also, Peter is very friendly and helpful. This is The Place where you can get real knowledge and mindset for your own research. Thank you for the training, Peter!

https://www.corelan-consulting.com/index.php/testimonials/corelan-advanced/

Best instructor, amazing experience

The Corelan Advanced Exploit Development was an amazing experience. It let you understand in a very detailed way how Heap works on Windows 7 and Windows 10 and how to use some techniques to correctly exploit it. Peter is a very good instructor, He is able to explain everything in a very clear and easy way. Peter also gives to you a "point of view" that you can use in every scenario and every version of Windows. At the end of the course, you will be provided with a lot of exercises. If you want to understand how Windows Heap works, how to exploit it and how to "think in the right way", this course is what you are looking for."

Raffaele Sabato, Corelan Advanced, Athens Greece Jan 2020

Corelan Training

5

2020-02-03T07:08:04+01:00

Raffaele Sabato, Corelan Advanced, Athens Greece Jan 2020

The Corelan Advanced Exploit Development was an amazing experience. It let you understand in a very detailed way how Heap works on Windows 7 and Windows 10 and how to use some techniques to correctly exploit it. Peter is a very good instructor, He is able to explain everything in a very clear and easy way. Peter also gives to you a "point of view" that you can use in every scenario and every version of Windows. At the end of the course, you will be provided with a lot of exercises. If you want to understand how Windows Heap works, how to exploit it and how to "think in the right way", this course is what you are looking for."

https://www.corelan-consulting.com/index.php/testimonials/best-instructor-amazing-experience/

In short, this course is fantastic!

In short, this course is fantastic! It's a 4-day bootcamp style course, fairly priced, covering Win32 exploit development on Windows 10. The quality of the labs was excellent, not giving away too much so you can learn on your own, but providing hints and solutions if you get stuck. There are also several supplemental "take home" exploit labs in the material you could work on outside of class or after the training ends to continue to sharpen your skills.

Another excellent value add is that after the course ends, there's an available support forum and Slack channel that all students can join for ongoing help in continuing to develop skills. Whether you're just starting out in exploit dev or have covered this material before and would like a great in-depth refresher, this is the class for you.

Peter has many years of experience writing exploits and is the author of mona, so during his step by step walkthroughs you will definitely pick up a lot of his tricks along the way that will help you save time when writing your own exploits. Although he is very knowledgeable, he is also very approachable, humble, patient and is excellent at teaching very complex topics in a way that students at all levels can understand.

If you've always wanted to learn how to write exploits, modify exploits, and understand how they work, but felt a little intimidated signing up for such a technical class like this, this is my advice: If you have a passion to learn exploit dev and are willing to put in the time, devote yourself to completing the labs even if it means staying late in class or taking the work back with you to the hotel room to work on it at night, then I can't think of a better instructor and a better course to kick that off than this one. Personally, I can’t wait to sign up for the Advanced Class which is the one that follows this one and looking forward to whatever newer classes may be released by Corelan Training in the future.

Student at Corelan Bootcamp, Anaheim CA (USA) May 2019

Corelan Training

5

2019-05-12T03:35:24+02:00

Student at Corelan Bootcamp, Anaheim CA (USA) May 2019

In short, this course is fantastic! It's a 4-day bootcamp style course, fairly priced, covering Win32 exploit development on Windows 10. The quality of the labs was excellent, not giving away too much so you can learn on your own, but providing hints and solutions if you get stuck. There are also several supplemental "take home" exploit labs in the material you could work on outside of class or after the training ends to continue to sharpen your skills. Another excellent value add is that after the course ends, there's an available support forum and Slack channel that all students can join for ongoing help in continuing to develop skills. Whether you're just starting out in exploit dev or have covered this material before and would like a great in-depth refresher, this is the class for you. Peter has many years of experience writing exploits and is the author of mona, so during his step by step walkthroughs you will definitely pick up a lot of his tricks along the way that will help you save time when writing your own exploits. Although he is very knowledgeable, he is also very approachable, humble, patient and is excellent at teaching very complex topics in a way that students at all levels can understand. If you've always wanted to learn how to write exploits, modify exploits, and understand how they work, but felt a little intimidated signing up for such a technical class like this, this is my advice: If you have a passion to learn exploit dev and are willing to put in the time, devote yourself to completing the labs even if it means staying late in class or taking the work back with you to the hotel room to work on it at night, then I can't think of...

https://www.corelan-consulting.com/index.php/testimonials/in-short-this-course-is-fantastic/

Amazing training! Excellent quality!

Amazing training ! Peter is an excellent trainer that wins your respect from the very first moment! I learned lots of things which are now very clear in my mind. I strongly recommend this course to anyone who wants to dive into low level concepts ! Excellent quality ! Thank you Peter, for such a powerful training course!

Xenofon Vassilakopoulos, Corelan Advanced, Athens Greece Jan 2020

Corelan Training

5

2020-01-31T18:12:39+01:00

Xenofon Vassilakopoulos, Corelan Advanced, Athens Greece Jan 2020

Amazing training ! Peter is an excellent trainer that wins your respect from the very first moment! I learned lots of things which are now very clear in my mind. I strongly recommend this course to anyone who wants to dive into low level concepts ! Excellent quality ! Thank you Peter, for such a powerful training course!

https://www.corelan-consulting.com/index.php/testimonials/amazing-training-excellent-quality/

I can’t recommend this course enough, if you’re thinking of taking it, do it.

This course was amazing, Peter set an incredible pace from the very start and didn't let up until the end. I now feel like I know the various Windows Heap internals more intimately that I thought possible and I have the means and materials to take that further. I can now explore everything up to up-to-date 64bit Windows 10 and know that I have the grounding to actually craft exploits on those systems. I can't recommend this course enough, if you're thinking of taking it, do it.

Student, Corelan Advanced, BruCON 2019

Corelan Training

5

2019-10-14T16:15:43+02:00

Student, Corelan Advanced, BruCON 2019

This course was amazing, Peter set an incredible pace from the very start and didn't let up until the end. I now feel like I know the various Windows Heap internals more intimately that I thought possible and I have the means and materials to take that further. I can now explore everything up to up-to-date 64bit Windows 10 and know that I have the grounding to actually craft exploits on those systems. I can't recommend this course enough, if you're thinking of taking it, do it.

https://www.corelan-consulting.com/index.php/testimonials/i-cant-recommend-this-course-enough-if-youre-thinking-of-taking-it-do-it/

Having completed the OSCP, I thought I knew stack overflows pretty well.. until I realised how little I really understood about stack ‘buffer’ overflows and in particular ‘Saved Return Pointer’ overwrite exploits. Peter is an excellent teacher and explains the exploit development process in such depth that makes these complex concepts almost too easy to understand. The knowledge of this course stretches far far far past what was covered in the OSCP in regards to windows exploit development and is definitely an excellent course to take your skills to the next level.

Chris Whipp, Corelan Bootcamp, Sydney AU Nov 2019

Corelan Training

2019-11-22T21:01:40+01:00

Chris Whipp, Corelan Bootcamp, Sydney AU Nov 2019

Having completed the OSCP, I thought I knew stack overflows pretty well.. until I realised how little I really understood about stack ‘buffer’ overflows and in particular ‘Saved Return Pointer’ overwrite exploits. Peter is an excellent teacher and explains the exploit development process in such depth that makes these complex concepts almost too easy to understand. The knowledge of this course stretches far far far past what was covered in the OSCP in regards to windows exploit development and is definitely an excellent course to take your skills to the next level.

https://www.corelan-consulting.com/index.php/testimonials/this-course-stretches-far-past-what-was-covered-in-oscp/

Highly recommend it, well worth the investment!

I was really looking forward to pushing my knowledge in exploit development to the next level and finally going for the heap, without having any prior experience related to that, in terms of exploit development. The outcome is that I now feel really comfortable in diving into heap exploits and really understanding them.

Peter is really great at explaining basically everything, the course structure and materials are very well organised and they are facilitating a consistent learning curve. The in-depth level of analysis and the granularity in understanding the course content are key takeaways. I would describe the training as a combined practical-theoretical experience with a focus on deep understanding for Windows Internals, exploit development and Windows heap concepts. The whole training helps you in building a strong knowledge base in which you can later invest your time into. Plus, the received support after the training session, all the "homeworks" 🙂 and the mindset obtained for looking at things as an exploit developer perspective are priceless.

I hope Peter will come up with other trainings in the future as well, really looking forward to it!

Thanks again Peter for all the knowledge and for truly inspiring me!

Stefan Nicula - Corelan Advanced - BruCON 2019

Corelan Training

5

2019-10-10T07:51:25+02:00

Stefan Nicula - Corelan Advanced - BruCON 2019

I was really looking forward to pushing my knowledge in exploit development to the next level and finally going for the heap, without having any prior experience related to that, in terms of exploit development. The outcome is that I now feel really comfortable in diving into heap exploits and really understanding them. Peter is really great at explaining basically everything, the course structure and materials are very well organised and they are facilitating a consistent learning curve. The in-depth level of analysis and the granularity in understanding the course content are key takeaways. I would describe the training as a combined practical-theoretical experience with a focus on deep understanding for Windows Internals, exploit development and Windows heap concepts. The whole training helps you in building a strong knowledge base in which you can later invest your time into. Plus, the received support after the training session, all the "homeworks" 🙂 and the mindset obtained for looking at things as an exploit developer perspective are priceless. I hope Peter will come up with other trainings in the future as well, really looking forward to it! Thanks again Peter for all the knowledge and for truly inspiring me!

https://www.corelan-consulting.com/index.php/testimonials/highly-recommend-it-well-worth-the-investment/

This is easily the best class I’ve taken on a technical security or exploitation topic.

This is easily the best class I've taken on a technical security or exploitation topic. That's a pretty sensationalist comment, but it's true. The course was in-depth, difficult, up-to-date with the latest concepts, and included tons of working material and proofs of concept. Peter has invested a lot of time and effort into his material, to ensure his students receive the best possible training. He was always the first one to class, and the last one to leave. The training day for the 2 day course at DerbyCon lasted a minimum of 18 hours. The course had a balance of lecturing, demonstration, and active exercises. During the exercises, hints for solutions were very rare, and students were forced to align their thinking to the problem set in front of them. The technical material provided was the best I've seen, but the course taught at a deeper level, too; slowly adjusting how the students would approach the problem, in order to build a working exploit.

And just so it's said, I would take this course again. There was far more material than my brain could absorb in 2 days. I definitely recommend this course.

Russ Rogers, Corelan Advanced, Derbycon

Corelan Training

5

2019-03-24T09:53:48+01:00

Russ Rogers, Corelan Advanced, Derbycon

This is easily the best class I've taken on a technical security or exploitation topic. That's a pretty sensationalist comment, but it's true. The course was in-depth, difficult, up-to-date with the latest concepts, and included tons of working material and proofs of concept. Peter has invested a lot of time and effort into his material, to ensure his students receive the best possible training. He was always the first one to class, and the last one to leave. The training day for the 2 day course at DerbyCon lasted a minimum of 18 hours. The course had a balance of lecturing, demonstration, and active exercises. During the exercises, hints for solutions were very rare, and students were forced to align their thinking to the problem set in front of them. The technical material provided was the best I've seen, but the course taught at a deeper level, too; slowly adjusting how the students would approach the problem, in order to build a working exploit. And just so it's said, I would take this course again. There was far more material than my brain could absorb in 2 days. I definitely recommend this course.

https://www.corelan-consulting.com/index.php/testimonials/this-is-easily-the-best-class-ive-taken-on-a-technical-security-or-exploitation-topic/

Loved it!

This training was awesome! I did a few security trainings before, but this is definitely my favourite so far! Peter was very very well prepared and had a lot of patience to answer all questions. The training starts gradually with windows 7 and then builds up to windows 10 and latest heap exploitation techniques. Very intensive, even though I had a bit of experience about these topics previously. After the 3rd day was felling quite tired of and day 4 was complete brain meltdown! Loved it!

Adrian, Corelan Advanced, Athens Greece Jan 2020

Corelan Training

5

2020-01-31T13:03:16+01:00

Adrian, Corelan Advanced, Athens Greece Jan 2020

This training was awesome! I did a few security trainings before, but this is definitely my favourite so far! Peter was very very well prepared and had a lot of patience to answer all questions. The training starts gradually with windows 7 and then builds up to windows 10 and latest heap exploitation techniques. Very intensive, even though I had a bit of experience about these topics previously. After the 3rd day was felling quite tired of and day 4 was complete brain meltdown! Loved it!

https://www.corelan-consulting.com/index.php/testimonials/loved-it/

One of the best technical trainings I was ever able to attend!

Just got back from the training and still trying to process everything. I will be busy for months working through what Peter has provided us with. If you are thinking about attending the training, but you are unsure because it "only" deals with Win32, IE on Win7, let me tell you one thing: It doesn't matter. This has nothing to do with "before you run, you have to learn how to walk". In this training, Peter explains the process of developing exploits on modern systems. The course aims to teach you how to think and how the heap works. It does not matter if you don't write exploits for Edge on x64, trust me. In order to do that, you have to put in the work first and understand how the low level mechanisms and data structures work and at the end of the day, most of the content you learn will (with modifications) also apply to Win10. It was one of the best technical trainings I was ever able to attend. Thanks Peter!

Bernd, Corelan Advanced, BruCON Oct 2018

Corelan Training

5

2019-03-24T07:41:15+01:00

Bernd, Corelan Advanced, BruCON Oct 2018

Just got back from the training and still trying to process everything. I will be busy for months working through what Peter has provided us with. If you are thinking about attending the training, but you are unsure because it "only" deals with Win32, IE on Win7, let me tell you one thing: It doesn't matter. This has nothing to do with "before you run, you have to learn how to walk". In this training, Peter explains the process of developing exploits on modern systems. The course aims to teach you how to think and how the heap works. It does not matter if you don't write exploits for Edge on x64, trust me. In order to do that, you have to put in the work first and understand how the low level mechanisms and data structures work and at the end of the day, most of the content you learn will (with modifications) also apply to Win10. It was one of the best technical trainings I was ever able to attend. Thanks Peter!

https://www.corelan-consulting.com/index.php/testimonials/corelan-advanced-brucon-2018/

Amazing training!!

The training was awesome, despite non being a completely “noob” in exploit development I choose to take the bootcamp in order to be sure to have the right foundations before moving to the advance course; to my surprise I learned lots of things which are now very clear in my mind. I understood some “obscure” windows internals and why they works in this manner, there is no more space for NOPs now that I really understand what I’m doing.
Peter is not just amazing from a technical point of view, he’s also a really excellent (and funny) trainer who definitely have passion for what he does and that strive for the best. I can’t recommend him enough, just come to the training and see it by yourself.

Paolo, Corelan Bootcamp, Zurich March 2020

Corelan Training

5

2020-03-11T11:28:08+01:00

Paolo, Corelan Bootcamp, Zurich March 2020

The training was awesome, despite non being a completely “noob” in exploit development I choose to take the bootcamp in order to be sure to have the right foundations before moving to the advance course; to my surprise I learned lots of things which are now very clear in my mind. I understood some “obscure” windows internals and why they works in this manner, there is no more space for NOPs now that I really understand what I’m doing. Peter is not just amazing from a technical point of view, he’s also a really excellent (and funny) trainer who definitely have passion for what he does and that strive for the best. I can’t recommend him enough, just come to the training and see it by yourself.

https://www.corelan-consulting.com/index.php/testimonials/amazing-training/

The training is both inspiring and challenging

If you are serious about learning the art and science of exploit development I would highly recommend Peter's course. The material he covered is high quality and I am unaware of any other course which teaches to the same level as Peter's material. The only thing that comes to mind is perhaps SANS 760 which is several thousand dollars more. The training is both inspiring and challenging I simply cannot recommend it enough.

Chris Hernandez, Corelan Advanced, Derbycon

Corelan Training

5

2019-03-24T09:58:58+01:00

Chris Hernandez, Corelan Advanced, Derbycon

If you are serious about learning the art and science of exploit development I would highly recommend Peter's course. The material he covered is high quality and I am unaware of any other course which teaches to the same level as Peter's material. The only thing that comes to mind is perhaps SANS 760 which is several thousand dollars more. The training is both inspiring and challenging I simply cannot recommend it enough.

https://www.corelan-consulting.com/index.php/testimonials/the-training-is-both-inspiring-and-challenging/

I can highly recommend Peter’s class to anybody looking to really understand this stuff

As somebody who doesn't do exploit development in my day to day work I'd always struggled with some of the more advanced concepts. Even after attending a few classes on the subject the material refused to stick with me.
Peter's class was different however. The pacing and explanations where perfect, leaving enough time to really play with the labs and build a real understanding of the topics instead of rushing through them to try and keep up with the class.
I can highly recommend Peter's class to anybody looking to really understand this stuff. It's scary what you can learn in 2 days given the right instructor, information and support!
A+++ would train with again!

Chris John Riley, Corelan Bootcamp, BruCON

Corelan Training

5

2019-03-24T10:05:47+01:00

Chris John Riley, Corelan Bootcamp, BruCON

As somebody who doesn't do exploit development in my day to day work I'd always struggled with some of the more advanced concepts. Even after attending a few classes on the subject the material refused to stick with me. Peter's class was different however. The pacing and explanations where perfect, leaving enough time to really play with the labs and build a real understanding of the topics instead of rushing through them to try and keep up with the class. I can highly recommend Peter's class to anybody looking to really understand this stuff. It's scary what you can learn in 2 days given the right instructor, information and support! A+++ would train with again!

https://www.corelan-consulting.com/index.php/testimonials/i-can-highly-recommend-peters-class-to-anybody-looking-to-really-understand-this-stuff/

Best exploitation course!

I took the Bootcamp training in March 2019 and I was impressed by how Peter explained highly complex topics with ease, patience, and enthusiasm. No matter what's your level of experience in debugging/exploitation, you will learn a lot! 0-day exploitation will become much easier to you once you know the foundations Peter teaches.

As far as I know, there are no better (or even comparable) courses than the ones offered by Corelan's, which deeply explain exploitation techniques. Hey! Don't you know that Peter is the developer of the **popular** exploitation module: mona.py! So, you're getting your knowledge right from the mouth of a guy who spent all of his life developing and researching this science!

Once I practice and master the Bootcamp's materials/exercises, I will DEFINITELY attend the Advance training.

Thanks, Peter again for the enthusiasm we got in the class! Looking forward to your Advanced training.

Student (Corelan Bootcamp) in Singapore, March 2019

Corelan Training

5

2019-03-24T07:27:18+01:00

Student (Corelan Bootcamp) in Singapore, March 2019

I took the Bootcamp training in March 2019 and I was impressed by how Peter explained highly complex topics with ease, patience, and enthusiasm. No matter what's your level of experience in debugging/exploitation, you will learn a lot! 0-day exploitation will become much easier to you once you know the foundations Peter teaches. As far as I know, there are no better (or even comparable) courses than the ones offered by Corelan's, which deeply explain exploitation techniques. Hey! Don't you know that Peter is the developer of the **popular** exploitation module: mona.py! So, you're getting your knowledge right from the mouth of a guy who spent all of his life developing and researching this science! Once I practice and master the Bootcamp's materials/exercises, I will DEFINITELY attend the Advance training. Thanks, Peter again for the enthusiasm we got in the class! Looking forward to your Advanced training.

https://www.corelan-consulting.com/index.php/testimonials/best-exploitation-course/

You should definitely prioritise Corelan training

Peter's ability to explain complex concepts in a simple and pragmatic way is exceptional. His Windows Exploit Development training is of the highest standard and will help newcomers and seasoned security testers alike understand modern memory corruption techniques. I've completed both the Bootcamp and Advanced courses now, along with OSCP and OSCE and I've learned invaluable lessons from each. If you're interested in Windows Exploit Development, ROP and heap exploitation, then you should definitely prioritise Corelan training. It's truly a privilege to take part in. I've learned a tonne, but the real learning comes with the exercises that are included as homework during and after the course.

Rick, Corelan Bootcamp & Advanced, Sydney Australia Nov 2019

Corelan Training

5

2019-12-04T08:26:26+01:00

Rick, Corelan Bootcamp & Advanced, Sydney Australia Nov 2019

Peter's ability to explain complex concepts in a simple and pragmatic way is exceptional. His Windows Exploit Development training is of the highest standard and will help newcomers and seasoned security testers alike understand modern memory corruption techniques. I've completed both the Bootcamp and Advanced courses now, along with OSCP and OSCE and I've learned invaluable lessons from each. If you're interested in Windows Exploit Development, ROP and heap exploitation, then you should definitely prioritise Corelan training. It's truly a privilege to take part in. I've learned a tonne, but the real learning comes with the exercises that are included as homework during and after the course.

https://www.corelan-consulting.com/index.php/testimonials/you-should-definitely-prioritise-corelan-training/

The quality of the material and teaching is absolutely stellar

Peter is a really knowledgeable and enthusiastic teacher. The information you are gonna get in this training will save you tons of personal research on Windows internals.
The quality of the material and teaching is absolutely stellar: heap management on both Win7 and Win10, in-depth analysis of specific vulnerabilities to consolidate concepts, tons (literally tons) of PoCs to hint you during your research after the training. I feel this course gave me material for years to come, and Peter will give you all the necessary tools to continue on after the training.

On top of this all I've really enjoyed Peter as a person: dedicated and willing to support his students all the way, during the classes and afterwards, he is a true legend. What you even get after the course is an incredible amount of guidance and support from alumni and Peter himself!

I really would not know what to ask more for!

Andrea, Corelan Advanced, Hack In Paris 2019

Corelan Training

5

2019-07-01T21:54:29+02:00

Andrea, Corelan Advanced, Hack In Paris 2019

Peter is a really knowledgeable and enthusiastic teacher. The information you are gonna get in this training will save you tons of personal research on Windows internals. The quality of the material and teaching is absolutely stellar: heap management on both Win7 and Win10, in-depth analysis of specific vulnerabilities to consolidate concepts, tons (literally tons) of PoCs to hint you during your research after the training. I feel this course gave me material for years to come, and Peter will give you all the necessary tools to continue on after the training. On top of this all I've really enjoyed Peter as a person: dedicated and willing to support his students all the way, during the classes and afterwards, he is a true legend. What you even get after the course is an incredible amount of guidance and support from alumni and Peter himself! I really would not know what to ask more for!

https://www.corelan-consulting.com/index.php/testimonials/the-quality-of-the-material-and-teaching-is-absolutely-stellar/

I would personally recommend his training

One of the most grueling yet beneficial training courses that I have ever attended in my entire offsec career! This course is definitely a good start for those who really want to get well acquainted with the basics of exploit development. On top of that, Peter is such an amazing instructor in terms of delivering his content and sharing us some tips and tricks when facing problems during the lab exercises. I would personally recommend his training to anyone who wants to start off basic exploit development.

Hamza, Corelan Bootcamp, Singapore March 2019

Corelan Training

5

2019-03-24T07:37:29+01:00

Hamza, Corelan Bootcamp, Singapore March 2019

One of the most grueling yet beneficial training courses that I have ever attended in my entire offsec career! This course is definitely a good start for those who really want to get well acquainted with the basics of exploit development. On top of that, Peter is such an amazing instructor in terms of delivering his content and sharing us some tips and tricks when facing problems during the lab exercises. I would personally recommend his training to anyone who wants to start off basic exploit development.

https://www.corelan-consulting.com/index.php/testimonials/corelan-bootcamp/

Can’t wait for the advanced course

I really enjoyed this training. It is accessible even if you don't work in IT security (like me). All you need is some basic knowledge in computer and above all a lot of motivation.

Peter can keep people focused for hours and explains complex ideas in a clear and structured way.

This is not a "fire and forget" course, there are plenty of keys to continue and improve yourself after.

I can't wait for the advanced course.

Thanks Peter !

Romain, Corelan Bootcamp, BruCON Spring 2017

Corelan Training

5

2019-03-24T07:43:37+01:00

Romain, Corelan Bootcamp, BruCON Spring 2017

I really enjoyed this training. It is accessible even if you don't work in IT security (like me). All you need is some basic knowledge in computer and above all a lot of motivation. Peter can keep people focused for hours and explains complex ideas in a clear and structured way. This is not a "fire and forget" course, there are plenty of keys to continue and improve yourself after. I can't wait for the advanced course. Thanks Peter !

https://www.corelan-consulting.com/index.php/testimonials/cant-wait-for-the-advanced-course/

The best hands-on experience you can get

If you're comfortable with ROP and if you want to take a deep dive into the world of heap exploitation, I can highly recommend this course. Peter is an excellent and inspiring teacher and researcher that's able to explain even the most complex aspects of the heap in a structured manner. He really cares whether his students understand the material in class and he even provides exercises that should last for months after the class has finished.

This is the best hands-on experience you can get and if you're willing to learn, this is for you.

Student - Corelan Advanced - BruCON 2019

Corelan Training

5

2019-10-10T07:52:49+02:00

Student - Corelan Advanced - BruCON 2019

If you're comfortable with ROP and if you want to take a deep dive into the world of heap exploitation, I can highly recommend this course. Peter is an excellent and inspiring teacher and researcher that's able to explain even the most complex aspects of the heap in a structured manner. He really cares whether his students understand the material in class and he even provides exercises that should last for months after the class has finished. This is the best hands-on experience you can get and if you're willing to learn, this is for you.

https://www.corelan-consulting.com/index.php/testimonials/the-best-hands-on-experience-you-can-get/

One of a kind experience

I attended Peter's advanced training in Columbia, MD. Nowhere else will you find an instructor capable of expressing complex topics in such a painlessly comprehensible manner. My newfound understanding of Windows' heap has made what was once a cryptic headache feel elementary.

Peter's hands-on guidance helps to reinforce the learned material with real-world practice. If you are interested in building a thorough foundation of knowledge and skills in the realm of Windows heap exploitation, then I can't recommend this course enough.

This was unquestionably the best course I had the honor of attending.

Fabius, Corelan Advanced (Columbia, MD, USA) - May 2021

Corelan Training

5

2021-05-22T12:14:47+02:00

Fabius, Corelan Advanced (Columbia, MD, USA) - May 2021

I attended Peter's advanced training in Columbia, MD. Nowhere else will you find an instructor capable of expressing complex topics in such a painlessly comprehensible manner. My newfound understanding of Windows' heap has made what was once a cryptic headache feel elementary. Peter's hands-on guidance helps to reinforce the learned material with real-world practice. If you are interested in building a thorough foundation of knowledge and skills in the realm of Windows heap exploitation, then I can't recommend this course enough. This was unquestionably the best course I had the honor of attending.

https://www.corelan-consulting.com/index.php/testimonials/one-of-a-kind-experience/

Simply amazing

Peter is simply amazing in explaining complex concepts and operating system internals in a very understandable and engaging way. His enthusiasm for the subject works really contagiously.

This course will give you a solid foundation and a boatload of exercises to take home with you to get you started in heap exploitation.

Bob, Corelan Advanced, BruCON September 2020

Corelan Training

5

2020-10-01T14:33:30+02:00

Bob, Corelan Advanced, BruCON September 2020

Peter is simply amazing in explaining complex concepts and operating system internals in a very understandable and engaging way. His enthusiasm for the subject works really contagiously. This course will give you a solid foundation and a boatload of exercises to take home with you to get you started in heap exploitation.

https://www.corelan-consulting.com/index.php/testimonials/simply-amazing/

I learned heaps about heap management

I had a blast when attending the Corelan Advanced training. I learned heaps about heap management in Windows and exploitation. Furthermore, during the training a lot of concepts became a part of my reversing / exploitation skills such as: vtables, pointers, IAT and ASLR. Although I was familiar with most of these concepts, during the training they became more clear to me, since they were building blocks for the heap exploitation course. The training is provided at a fast pace and Peter is able to create a great environment for learning. I did not only learn how the Windows heap works, but was able to use the learned concepts to understand the basics about the Linux heap manager. Within a week of the training, I solved my first Linux heap CTF challenge, without any previous knowledge of how the Linux heap worked 🙂

Rikkert ten Klooster, Corelan Advanced, Hack In Paris 2019

Corelan Training

5

2019-06-25T15:45:50+02:00

Rikkert ten Klooster, Corelan Advanced, Hack In Paris 2019

I had a blast when attending the Corelan Advanced training. I learned heaps about heap management in Windows and exploitation. Furthermore, during the training a lot of concepts became a part of my reversing / exploitation skills such as: vtables, pointers, IAT and ASLR. Although I was familiar with most of these concepts, during the training they became more clear to me, since they were building blocks for the heap exploitation course. The training is provided at a fast pace and Peter is able to create a great environment for learning. I did not only learn how the Windows heap works, but was able to use the learned concepts to understand the basics about the Linux heap manager. Within a week of the training, I solved my first Linux heap CTF challenge, without any previous knowledge of how the Linux heap worked 🙂

https://www.corelan-consulting.com/index.php/testimonials/i-learned-heaps-about-heap-management/

The way trainings should be!!

I've been to various trainings until now and always left disappointed in the lack of technical depth. Peter is what I call a master of his domain. In bootcamp he teaches you how the OS works, how memory works, and all other inner workings of a computer (relevant to Exploit development), then and only then he goes into exploitation. Be comfortable with Assembly, python and prepare for a hardcore training if you are a beginner.

Peter is 1/ an expert in communication, 2/an expert in exploitation and 3/ an expert in teaching skills

He loves what he does and you can see it clearly. I would give him 10 stars if I could. As an advice, if you are a beginner in exploitation and want to learn as much as possible, do at least 5-10 simple exploits before coming to the training, the pace is brutal. Thank you for a great training Peter,
Madalin

Madalin, Corelan Bootcamp, Zurich March 2020

Corelan Training

5

2020-03-08T11:28:59+01:00

Madalin, Corelan Bootcamp, Zurich March 2020

I've been to various trainings until now and always left disappointed in the lack of technical depth. Peter is what I call a master of his domain. In bootcamp he teaches you how the OS works, how memory works, and all other inner workings of a computer (relevant to Exploit development), then and only then he goes into exploitation. Be comfortable with Assembly, python and prepare for a hardcore training if you are a beginner. Peter is 1/ an expert in communication, 2/an expert in exploitation and 3/ an expert in teaching skills He loves what he does and you can see it clearly. I would give him 10 stars if I could. As an advice, if you are a beginner in exploitation and want to learn as much as possible, do at least 5-10 simple exploits before coming to the training, the pace is brutal. Thank you for a great training Peter, Madalin

https://www.corelan-consulting.com/index.php/testimonials/the-way-trainings-should-be/

This course is one of the best I have ever taken and is worth every penny.

This course is one of the best I have ever taken and is worth every penny. Starting with the fundamentals of Windows and progressively going toward memory management mechanics, this class is a must for anyone that want to get serious with exploit development. Not only the course material is great and helpful with a lot of hands-on material, but the teacher, Peter, is a excellent teacher that express his ideas in a limpid and easy to understand way. It was a great experience that I would gladly recommend ! See you all in the advanced training !

Patrick, Corelan Bootcamp, Hack In Paris

Corelan Training

5

2019-03-24T09:57:05+01:00

Patrick, Corelan Bootcamp, Hack In Paris

This course is one of the best I have ever taken and is worth every penny. Starting with the fundamentals of Windows and progressively going toward memory management mechanics, this class is a must for anyone that want to get serious with exploit development. Not only the course material is great and helpful with a lot of hands-on material, but the teacher, Peter, is a excellent teacher that express his ideas in a limpid and easy to understand way. It was a great experience that I would gladly recommend ! See you all in the advanced training !

https://www.corelan-consulting.com/index.php/testimonials/this-course-is-one-of-the-best-i-have-ever-taken-and-is-worth-every-penny/

Required

This course gets my very rare stamp of approval.

Timeless Prototype, Corelan Bootcamp, Private training

Corelan Training

5

2019-03-24T10:01:54+01:00

Timeless Prototype, Corelan Bootcamp, Private training

This course gets my very rare stamp of approval.

https://www.corelan-consulting.com/index.php/testimonials/required/

nothing compares to Peter’s course

I have taken SANS and Offensive Security courses on similar topics (i.e. SEC-709 and OSCE), and although those courses were great, nothing compares to Peter's course. Looking forward to taking the Advanced course.

Nelson Santos, Corelan Bootcamp, Derbycon

Corelan Training

5

2019-03-24T09:59:52+01:00

Nelson Santos, Corelan Bootcamp, Derbycon

I have taken SANS and Offensive Security courses on similar topics (i.e. SEC-709 and OSCE), and although those courses were great, nothing compares to Peter's course. Looking forward to taking the Advanced course.

https://www.corelan-consulting.com/index.php/testimonials/nothing-compares-to-peters-course/

Fantastic Class And Instructor

I took the "Advanced" Corelan class at Derbycon in 2015 and it was a class I won't soon forget. I am still working through the lab materials even though the class was months ago. This isn't one of those other classes that will leave you wishing you were given more information. Peter does a fantastic job of putting together relevant and highly useful information. On top of that, he is a fantastic instructor... He knows how to push you without letting you flounder on your own. I would highly recommend this course to anyone who wants to go beyond the typical "exploit dev" classes.

Price, Corelan Advanced, Derbycon

Corelan Training

5

2019-03-24T09:46:09+01:00

Price, Corelan Advanced, Derbycon

I took the "Advanced" Corelan class at Derbycon in 2015 and it was a class I won't soon forget. I am still working through the lab materials even though the class was months ago. This isn't one of those other classes that will leave you wishing you were given more information. Peter does a fantastic job of putting together relevant and highly useful information. On top of that, he is a fantastic instructor... He knows how to push you without letting you flounder on your own. I would highly recommend this course to anyone who wants to go beyond the typical "exploit dev" classes.

https://www.corelan-consulting.com/index.php/testimonials/fantastic-class-and-instructor/

The training you need if you ever think of learning exploit development

The Advanced Exploit Development training is the best training I've ever done so far. Unlike many training about exploit development, this course starts with the fundamentals of memory management on Windows and then dive into exploitation of heap-related vulnerabilities, bypassing modern memory protections. This approach will give you all the knowledge needed to understand how to conduct your proper research on known and future memory features/protections. Mastering heap exploitation is a long journey, and, without hesitation, this course is the best starting point. I highly recommend the Corelan Advanced Exploit Development training.

Christophe De La Fuente, Corelan Advanced, February 2020

Corelan Training

5

2020-02-20T07:21:19+01:00

Christophe De La Fuente, Corelan Advanced, February 2020

The Advanced Exploit Development training is the best training I've ever done so far. Unlike many training about exploit development, this course starts with the fundamentals of memory management on Windows and then dive into exploitation of heap-related vulnerabilities, bypassing modern memory protections. This approach will give you all the knowledge needed to understand how to conduct your proper research on known and future memory features/protections. Mastering heap exploitation is a long journey, and, without hesitation, this course is the best starting point. I highly recommend the Corelan Advanced Exploit Development training.

https://www.corelan-consulting.com/index.php/testimonials/the-training-you-need-if-you-ever-think-of-learning-exploit-development/

Brilliant course

Brilliant course that has been meticulously planned. I had very high hopes for this course and they were exceeded in every way. Peter is a fantastic teacher and it is clear that he has a true passion for security and exploit development. The bootcamp covers all the fundamentals you need to know and ramps up into exploitation very quickly. Before you know it you are popping shells and NOP'ping out with your ROP out.

Cooper, Corelan Bootcamp, Sydney

Corelan Training

5

2019-03-24T09:55:37+01:00

Cooper, Corelan Bootcamp, Sydney

Brilliant course that has been meticulously planned. I had very high hopes for this course and they were exceeded in every way. Peter is a fantastic teacher and it is clear that he has a true passion for security and exploit development. The bootcamp covers all the fundamentals you need to know and ramps up into exploitation very quickly. Before you know it you are popping shells and NOP'ping out with your ROP out.

https://www.corelan-consulting.com/index.php/testimonials/brilliant-course/

The best course to start exploit dev journey

This was my first course to start my exploit development track. I have been reading around internet for a while and got lost in some places. Then decided to get a professional training. Going through internet and getting people reviews there were couple of options. Finally, decided to go through corelan bootcamp based on a fair comparison with other courses.

Guest What !! This is the best place to start with. Very detailed explanation in very simple terms. Peter has all the answers to the questions I had and he can go as deep as you ask. But in very simple words and examples which makes it easy to understand.

Many thanks to Corelan and Peter for this amazing training.

Mohammed Al Baqari, Corelan Bootcamp, Dubai Oct 2020

Corelan Training

5

2020-10-31T08:55:10+01:00

Mohammed Al Baqari, Corelan Bootcamp, Dubai Oct 2020

This was my first course to start my exploit development track. I have been reading around internet for a while and got lost in some places. Then decided to get a professional training. Going through internet and getting people reviews there were couple of options. Finally, decided to go through corelan bootcamp based on a fair comparison with other courses. Guest What !! This is the best place to start with. Very detailed explanation in very simple terms. Peter has all the answers to the questions I had and he can go as deep as you ask. But in very simple words and examples which makes it easy to understand. Many thanks to Corelan and Peter for this amazing training.

https://www.corelan-consulting.com/index.php/testimonials/the-best-course-to-start-exploit-dev-journey/

Awesome training

Once you are done with all the basic exploitation tutorials and trainings, you should get this one. The training is amazing, Peter is one of the most knowledgeable people for the subject and it shows from the first minutes. The content is great, organized and has a great learning curve. It builds up until everything is very clear on your head regarding windows heap exploitation. Once the training is done you feel like you are one step away from researching and building your own exploits. All it remains is to dedicate time to do it. You are going to have all the tools and knowledge needed.

GK, Corelan Advanced, Athens Greece, Jan 2020

Corelan Training

5

2020-02-24T08:25:23+01:00

GK, Corelan Advanced, Athens Greece, Jan 2020

Once you are done with all the basic exploitation tutorials and trainings, you should get this one. The training is amazing, Peter is one of the most knowledgeable people for the subject and it shows from the first minutes. The content is great, organized and has a great learning curve. It builds up until everything is very clear on your head regarding windows heap exploitation. Once the training is done you feel like you are one step away from researching and building your own exploits. All it remains is to dedicate time to do it. You are going to have all the tools and knowledge needed.

https://www.corelan-consulting.com/index.php/testimonials/awesome-training/

I can’t recommend the course enough

I was warned going in to the class that it would be a challenge, and it was, but it wasn't by any means unachievable. Peter went over all the fundamentals better than I'd had them gone over before, he was patient, methodical, personable and lots of fun. The material was great, and the exercises the perfect compliment - they teach you some traps and quirks "the hard way" that Peter steps in to clarify if you miss them. Having gotten stuck on such quirks, I know I'll never forget the lessons for when it matters. Peter really invests himself in your progress and understanding. I can't recommend the course enough, and I'm looking forward to the advanced course!

Justin Steven, Corelan Bootcamp, Sydney

Corelan Training

5

2019-03-24T09:56:27+01:00

Justin Steven, Corelan Bootcamp, Sydney

I was warned going in to the class that it would be a challenge, and it was, but it wasn't by any means unachievable. Peter went over all the fundamentals better than I'd had them gone over before, he was patient, methodical, personable and lots of fun. The material was great, and the exercises the perfect compliment - they teach you some traps and quirks "the hard way" that Peter steps in to clarify if you miss them. Having gotten stuck on such quirks, I know I'll never forget the lessons for when it matters. Peter really invests himself in your progress and understanding. I can't recommend the course enough, and I'm looking forward to the advanced course!

https://www.corelan-consulting.com/index.php/testimonials/i-cant-recommend-the-course-enough/

If you want to dive into modern exploitation, this is for you.

I have no doubt stating that Corelan Advanced has been the best infosec training I had so far.
Peter is an excellent instructor who's able to convey his experience and communicate passion about the topics and give you the tools/primitives to investigate and explore yourself how to deal with exploit development in 2019.
The training homework will keep me busy for the next 6 months/a year for sure, but now I do feel more comfortable and ready exploring and researching modern bug classes.

If you want to dive into modern exploitation, this is for you.

Matteo Malvica, Corelan Advanced, BruCON Oct 2019

Corelan Training

5

2019-10-14T13:05:23+02:00

Matteo Malvica, Corelan Advanced, BruCON Oct 2019

I have no doubt stating that Corelan Advanced has been the best infosec training I had so far. Peter is an excellent instructor who's able to convey his experience and communicate passion about the topics and give you the tools/primitives to investigate and explore yourself how to deal with exploit development in 2019. The training homework will keep me busy for the next 6 months/a year for sure, but now I do feel more comfortable and ready exploring and researching modern bug classes. If you want to dive into modern exploitation, this is for you.

https://www.corelan-consulting.com/index.php/testimonials/if-you-want-to-dive-into-modern-exploitation-this-is-for-you/

Absolutely fantastic course!

Absolutely fantastic course! Grueling and incredibly rewarding. I would recommend this course to anyone who wants a thorough introduction to exploit development. Peter's presentation of the content was engaging, even with 12 hour days I did not see one person fall asleep! This is not a spoon fed course, be prepared to work hard and be challenged.

Wizzy, Corelan Bootcamp, Sydney

Corelan Training

5

2019-03-24T09:52:45+01:00

Wizzy, Corelan Bootcamp, Sydney

Absolutely fantastic course! Grueling and incredibly rewarding. I would recommend this course to anyone who wants a thorough introduction to exploit development. Peter's presentation of the content was engaging, even with 12 hour days I did not see one person fall asleep! This is not a spoon fed course, be prepared to work hard and be challenged.

https://www.corelan-consulting.com/index.php/testimonials/absolutely-fantastic-course/

Can’t say enough good things about it

Peter is among the best exploit developers and researchers there are. The knowledge you will learn in this class will save you months of independent effort in addition to putting you at a distinct advantage when performing your own research.

It is extremely difficult to get this knowledge in a form which is well structured and professionally written, making this course an absolute gem. After this course, you will be able to, at the very least, understand even the most seemingly perplexing binary exploitation write ups often published by the likes of ZDI. In the best case, you'll be able to apply this knowledge to broaden or kick-start your research aspirations. You'll also come away with notes and material that are invaluable - this information will not appear after a few quick google searches.

Thank you for the training, Peter. Can't say enough good things about it.

Dan, Corelan Advanced, BruCON Oct 2018

Corelan Training

5

2019-03-24T07:40:27+01:00

Dan, Corelan Advanced, BruCON Oct 2018

Peter is among the best exploit developers and researchers there are. The knowledge you will learn in this class will save you months of independent effort in addition to putting you at a distinct advantage when performing your own research. It is extremely difficult to get this knowledge in a form which is well structured and professionally written, making this course an absolute gem. After this course, you will be able to, at the very least, understand even the most seemingly perplexing binary exploitation write ups often published by the likes of ZDI. In the best case, you'll be able to apply this knowledge to broaden or kick-start your research aspirations. You'll also come away with notes and material that are invaluable - this information will not appear after a few quick google searches. Thank you for the training, Peter. Can't say enough good things about it.

https://www.corelan-consulting.com/index.php/testimonials/corelan-advanced-at-brucon-0x0a/