Domain overview
Exploit development rewards precision. The relevant questions concern primitives, constraints, process behavior, reliability and how an input becomes repeatable code execution.
Related certification context
These tracks are strong reference points for the exploit-development side of the platform.
- OffSec OSED / EXP-301Windows user-mode exploit development and disciplined memory-corruption workflow.
- OffSec OSEE / EXP-401Advanced exploitation and high-end exploit engineering context.
Selected public references
- pwntools Documentationdocs.pwntools.com/en/stable/
- gef-legacy.readthedocs.io · Latestgef-legacy.readthedocs.io/en/latest/
- pwndbgpwndbg.re/
- Shell-Stormshell-storm.org/
- Exploit Databaseexploit-db.com/
- GitHub · longld / pedagithub.com/longld/peda
- ir0nstone.gitbook.io · Notesir0nstone.gitbook.io/notes/
Topic index
Introduction
Introduction: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Shell-Codes/Payloads Build Your Own (Linux Shellcoding)
Shell-Codes/Payloads Build Your Own (Linux Shellcoding): memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
Python Pentesting
Python Pentesting: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Go Pentesting
Go Pentesting: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Bash Pentesting
Bash Pentesting: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
PowerShell Pentesting
PowerShell Pentesting: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Ruby Pentesting
Ruby Pentesting: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Exploit Analysis
Exploit Analysis: memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
Format String Exploitation
Format String Exploitation: memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
Building A Metasploit Exploit
Building A Metasploit Exploit: memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
Finding Opcodes
Finding Opcodes: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
macOS Shellcoding
macOS Shellcoding: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Windows Shellcoding
Windows Shellcoding: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Developing Exploit Pack Exploits
Developing Exploit Pack Exploits: memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
AV/EDR Evasion Programming
AV/EDR Evasion Programming: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
Programming Malicious Office Macros
Programming Malicious Office Macros: memory behavior, execution prerequisites, reliability constraints and observable impact in a controlled lab.
Ecxd - Exploit Development Certification
ECXD exploit development certification: certification scope, expected competencies and a practical route from objectives to hands-on validation.
Quick Reference
Quick Reference: exploit development assessment context, validation priorities and evidence that supports a defensible finding.
