EC-Council - EC-Council CAST Exploit Development Overdrive course

Duration

Duration:

Just 3 Days

Method

Method:

Classroom / Online / Hybrid

Next date

Next date:

24/6/2024 (Monday)

Overview

The EC-Council Centre of Advanced Security Training has arrived at Firebrand Training. On this intensive three-day Exploit Development Overdrive course, you will learn how to write your own application exploits.

Warning: This is not a beginner’s course. It's highly-technical, with many hands-on labs. The course is right for you if you're an: experienced security professional, penetration tester, researcher or application developer.

You will learn how to:

  • Write your own exploits from scratch
  • Discover new vulnerabilities in applications
  • Use Metasploit as an exploit development framework
  • Exploit stack and heap overflows on both Linux and Windows
  • Bypass memory protection measures like DEP, ASLR, and Stack Canaries
  • Write your own shellcode on both Linux and Windows
  • Write stack- and heap-based buffer overflow exploits in both Perl and Python
  • Use debuggers like GDB, Ollydbg, and WinDebug

Note: this course doesn't include an exam, but you'll become Exploit Development Overdrive certified.

9x Accredited Training Centre of the Year

Accredited Training Centre of the Year

Firebrand Training has again won the EC-Council Accredited Training Centre of the Year Award, from a Training Partner network that has more than 700 training centres across 107 countries. This extends a record-breaking run of successive awards to nine years.

Jay Bavisi, President of EC-Council said: “The annual EC-Council Awards highlights the commitment and achievements of our global partners and trainers that have contributed to the information security community.”

Four reasons why you should sit your CAST EDO course with Firebrand Training

  1. You'll be CAST EDO trained and certified faster. Learn more on this 3-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your CAST EDO course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass CAST EDO first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study CAST EDO with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 134.561 students saving more than one million hours since 2001

Curriculum

Module 1: The Exploit Development Process

  • Exploit methodology
  • Fault injection
  • Fuzzers
  • Tools of the trade

Module 2: Introduction to Assembly

  • Linux assembly
  • Windows assembly
  • Writing and debugging assembly programs

Module 3: Writing Shellcode

  • Linux shellcode
  • Windows shellcode

Module 4: Stack-Based Buffer Overflows

  • Memory architecture
  • Fault injection
  • Ollydbg
  • WinDebug
  • Gdb
  • Metasploit tools
  • Writing stack-based overflows for Linux
  • Writing stack-based overflows for Windows

Module 5: SEH Exploits

  • Structured Exception Handling
  • SafeSEH Bypass
  • Writing SEH exploits

Module 6: Advanced Buffer Overflows

  • Bypassing DEP
  • Bypassing ASLR
  • Stack Cookies
  • Egg Hunter Shellcode

Module 7: Heap Overflows

  • Heap architecture
  • Writing heap overflows

Module 8: Advanced Metasploit Framework

  • Writing exploits for Metasploit
  • Advanced Meterpreter

Module 9: Format String Attacks

  • Writing format string attacks

What's Included

Official EC-Council Courseware

  • CAST 616 - Exploit Development Overdrive

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Prerequisites

You should be familiar with IT security best practices, the basics of TCP/IP networking, and basic programming concepts. You should also be familiar with Metasploit and VMware.

Knowledge of programming languages isn't necessary, but it is beneficial if you have exposure to a common programming or scripting language such as Python, Perl, Ruby, C, C++, or Assembly. A programming background is not required, but you will be writing lots of code in class.

Are you ready to get certified in record time?

We interview all applicants for the course on their technical background, degrees and certifications held, and general suitability. If you get through this screening process, it means you stand a great chance of passing.

Firebrand Training is an immersive training environment. You must be committed to the course. The above prerequisites are guidelines, but many students with less experience have other background or traits that have enabled their success in accelerated training through Firebrand Training.

If you have any doubts as to whether you meet the pre-requisites please call 89 88 66 05 and speak to one of our enrolment consultants, who can help you with a training plan.

Reviews

We've currently trained 134.561 students in 12 years. We asked them all to review our Accelerated Learning. Currently,
96,41% have said Firebrand exceeded their expectations:

"Great 4 days of in-person training. The trainer was knowledgeable and brought a wealth of real world examples to what would have been otherwise a very theoretical training course."
Ian Smith, DWP. (8/1/2024 (Monday) to 11/1/2024 (Thursday))

"I attended the CND course which was online-led. This course was delivered very well allowing me to develop my knowledge in the related topics. Despite being online, I felt involved and felt as if I could ask any questions at any time."
Molly Macuras, Electricity North West Limited. (8/1/2024 (Monday) to 11/1/2024 (Thursday))

"The course was very informative and helped introduce us to the material. Instructor was very attentive and showed us many practical examples also."
SON, Lloyds. (3/10/2023 (Tuesday) to 6/10/2023 (Friday))

"Good training experience. The trainer was engaging and knowledgable and tried to explain the subject matter in an easy to understand way, rather than just reading slides."
SM. (3/10/2023 (Tuesday) to 6/10/2023 (Friday))

"Excellent course, our trainer was more than happy to go above and beyond."
Richard Williams, Head of Assurance. (25/9/2023 (Monday) to 29/9/2023 (Friday))

Course Dates

Start

Finish

Status

Location

Book now

19/2/2024 (Monday)

21/2/2024 (Wednesday)

Finished - Leave feedback

-

 

24/6/2024 (Monday)

26/6/2024 (Wednesday)

Wait list

Nationwide

 

5/8/2024 (Monday)

7/8/2024 (Wednesday)

Limited availability

Nationwide

 

16/9/2024 (Monday)

18/9/2024 (Wednesday)

Open

Nationwide

 

28/10/2024 (Monday)

30/10/2024 (Wednesday)

Open

Nationwide

 

9/12/2024 (Monday)

11/12/2024 (Wednesday)

Open

Nationwide

 

Latest Reviews from our students