EC-Council - EC-Council CAST Exploit Development Overdrive course

Duration

Duration:

Only 3 Days

Method

Method:

Classroom / Online / Hybrid

Next date

Next date:

24/6/2024 (Monday)

Overview

The EC-Council Centre of Advanced Security Training has arrived at Firebrand Training. On this intensive three-day Exploit Development Overdrive course, you will learn how to write your own application exploits.

Warning: This is not a beginner’s course. It's highly-technical, with many hands-on labs. The course is right for you if you're an: experienced security professional, penetration tester, researcher or application developer.

You will learn how to:

  • Write your own exploits from scratch
  • Discover new vulnerabilities in applications
  • Use Metasploit as an exploit development framework
  • Exploit stack and heap overflows on both Linux and Windows
  • Bypass memory protection measures like DEP, ASLR, and Stack Canaries
  • Write your own shellcode on both Linux and Windows
  • Write stack- and heap-based buffer overflow exploits in both Perl and Python
  • Use debuggers like GDB, Ollydbg, and WinDebug

Note: this course doesn't include an exam, but you'll become Exploit Development Overdrive certified.

9x Accredited Training Centre of the Year

Accredited Training Centre of the Year

Firebrand Training has again won the EC-Council Accredited Training Centre of the Year Award, from a Training Partner network that has more than 700 training centres across 107 countries. This extends a record-breaking run of successive awards to nine years.

Jay Bavisi, President of EC-Council said: “The annual EC-Council Awards highlights the commitment and achievements of our global partners and trainers that have contributed to the information security community.”

Seven reasons why you should sit your CAST EDO course with Firebrand Training

  1. You’ll be CAST EDO certified in just 3 days. With us, you’ll be CAST EDO trained in record time
  2. Our CAST EDO course is all-inclusive. A one-off fee covers all course materials, accommodation and meals. No hidden extras
  3. Pass CAST EDO first time or train again for free. This is our guarantee. We're sure you'll pass your CAST EDO course first time. But if you don’t, come back within a year, and only pay for accommodation. Everything else is free
  4. You’ll learn more CAST EDO. A day with a traditional training provider generally runs from 9am – 5pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day quality learning time, with your instructor
  5. You’ll learn CAST EDO faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
  6. You’ll be studying CAST EDO with the best. We have won the Learning and Performance Institute (LPI) "Training Company of the Year" a record three times. As well as winning many more awards, we’ve trained and certified 134561 professionals, and we’re partners with all of the big names in the business
  7. You'll do more than study CAST EDO courseware. We use labs, case studies and practice tests to make sure you can apply your new knowledge to the work environment. Our instructors use demonstrations and real-world experience to keep the day interesting and engaging

Benefits

Other accelerated training providers rely heavily on lecture and independent self-testing and study.

Effective technical instruction must be highly varied and interactive to keep attention levels high, promote camaraderie and teamwork between the students and instructor, and solidify knowledge through hands-on learning.

Firebrand Training provides instruction to meet every learning need:

  • Intensive group instruction
  • One-on-one instruction attention
  • Hands-on labs
  • Lab partner and group exercises
  • Question and answer drills
  • Independent study

Curriculum

Module 1: The Exploit Development Process

  • Exploit methodology
  • Fault injection
  • Fuzzers
  • Tools of the trade

Module 2: Introduction to Assembly

  • Linux assembly
  • Windows assembly
  • Writing and debugging assembly programs

Module 3: Writing Shellcode

  • Linux shellcode
  • Windows shellcode

Module 4: Stack-Based Buffer Overflows

  • Memory architecture
  • Fault injection
  • Ollydbg
  • WinDebug
  • Gdb
  • Metasploit tools
  • Writing stack-based overflows for Linux
  • Writing stack-based overflows for Windows

Module 5: SEH Exploits

  • Structured Exception Handling
  • SafeSEH Bypass
  • Writing SEH exploits

Module 6: Advanced Buffer Overflows

  • Bypassing DEP
  • Bypassing ASLR
  • Stack Cookies
  • Egg Hunter Shellcode

Module 7: Heap Overflows

  • Heap architecture
  • Writing heap overflows

Module 8: Advanced Metasploit Framework

  • Writing exploits for Metasploit
  • Advanced Meterpreter

Module 9: Format String Attacks

  • Writing format string attacks

What's Included

Official EC-Council Courseware

  • CAST 616 - Exploit Development Overdrive

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Prerequisites

You should be familiar with IT security best practices, the basics of TCP/IP networking, and basic programming concepts. You should also be familiar with Metasploit and VMware.

Knowledge of programming languages isn't necessary, but it is beneficial if you have exposure to a common programming or scripting language such as Python, Perl, Ruby, C, C++, or Assembly. A programming background is not required, but you will be writing lots of code in class.

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.

Reviews

Here's the Firebrand Training review section. Since 2001 we've trained exactly 134561 students and asked them all to review our Accelerated Learning. Currently, 96.41% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.


"CEH is a very hard training, but it's doable thanks to the friendly employees at Firebrand and the accommodations."
Kas Ramjiawan, ITQM. (4/3/2024 (Monday) to 8/3/2024 (Friday))

"Heavy stuff! Long days and almost no time for some leisure or preparing for exam... I thought there was more hands-on training involved."
MR. (4/3/2024 (Monday) to 8/3/2024 (Friday))

"A great learning experience."
Alan Crowdy, GNS . (5/12/2019 (Thursday) to 7/12/2019 (Saturday))

"Firebrand is providing me with a condensed training always fitting my tight timetable with a high success rate on the certification."
Anonymous (5/12/2019 (Thursday) to 7/12/2019 (Saturday))

"In short it was a very pleasant stay at the hotel, and the instructor was great."
Anonymous (16/4/2018 (Monday) to 20/4/2018 (Friday))

Course Dates

Start

Finish

Status

Location

Book now

19/2/2024 (Monday)

21/2/2024 (Wednesday)

Finished - Leave feedback

-

 

24/6/2024 (Monday)

26/6/2024 (Wednesday)

Wait list

Nationwide

 

5/8/2024 (Monday)

7/8/2024 (Wednesday)

Limited availability

Nationwide

 

16/9/2024 (Monday)

18/9/2024 (Wednesday)

Open

Nationwide

 

28/10/2024 (Monday)

30/10/2024 (Wednesday)

Open

Nationwide

 

9/12/2024 (Monday)

11/12/2024 (Wednesday)

Open

Nationwide

 

Latest Reviews from our students