Skip to content
UdemyHackingPaid courseBeginner levelCertificate

Ethical Hacking & Bug Hunting: Buffer Overflow For Beginners (Udemy.com)

Learn how to exploit Buffer Overflows on Windows systems. Get a shell! (Reverse engineering and Exploit development).

Created by: Eslam Medhat

Last updated July 2019

icon
What you will learn

  • Fuzzing applications.
  • Using a debugger to examine the crash.
  • Identifying error conditions using debugging.
  • Targeting the EIP register.
  • Identifying bad characters.
  • Locating the vulnerable module.
  • Exploit Development.
  • Creating final exploit code.
  • Gain Remote Code Execution on Windows.

How it compares

Against the other 523 rated Udemy courses in Hacking on CourseDuck:

  • Rating4.2 out of 5higher than 12% of them
  • Reviews560#259 of 524 by number of reviews
  • Length1.4 hoursshorter than 91% of them
  • Last updatedJuly 2019earlier than 88% of them

icon
Course Description

The primary goal of this course is to provide you with practical exposure to the world of bug hunting. After taking this course, you will have a better understanding of the approaches (reverse engineering, exploit development) that bug hunters use to find security vulnerabilities. You will learn how to exploit Buffer Overflows on Windows systems. This is an initial course and begins from the very basics of exploitation and is beginner-friendly.

The difficulty is that most IT professionals do not have the general software development background required to begin the subject of buffer overflow. This course cuts down the technical subjects of computer memory management, controlling code, and data inside of a working program, and exploiting poor quality software into terms that IT people with no software development knowledge can understand.


A buffer overflow is a popular software coding error that an intruder could use to take control over your system. To efficiently decrease buffer overflow vulnerabilities, it is necessary to understand what buffer overflows are, what threats they act to your applications, and what methods attackers use to successfully exploit these vulnerabilities.


In this course, you will learn how to use different tools such as Immunity Debugger, Mona library for Immunity Debugger, Metasploit, msfvenom, Spike, File Fuzz and much more. This course is intended to be practical.


In this course, we will answer the following questions:

What is Buffer Overflow?

How do buffer overflow attacks work?

How to find buffer overflow vulnerabilities?

How to write a buffer overflow exploit?


Syllabus:

  • Reverse engineering.

  • Fuzzing applications.

  • Using a debugger to examine the crash.

  • Identifying error conditions using debugging.

  • Targeting the EIP register.

  • Identifying bad characters.

  • Locating the vulnerable module.

  • Creating final exploit code.

  • Exploit development.

  • Gain Remote Code Execution on Windows.


With this course you'll get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you within 10 hours.


NOTE: This course is created for educational purposes only.


icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Eslam Medhat

is a professional pen-tester and ethical hacker with over 9 years of IT experience bringing a strong background in programming languages and application security, ranging from network and system administration to exploit research and development. He reported various vulnerabilities for high profile companies and vendors (such as Microsoft, Yahoo, Sony, AVG, Bitdefender, Facebook and many more) and was successfully acknowledged by them.


Certifications: 

- OSCP

- CEH (Certified Ethical Hacker)

- GPEN

- GWAPT

- CCNA and CCNA Security

- MCITP

- Advanced Linux&InfoSEC


Technical Skills:

Security: Application and network penetration testing, source code review, Incident Response, protocol analysis, fuzzing, reverse engineering, antiDDoS, IDS.

Languages: PHP, JavaScript, Java SE, C++, C#, Python, Visual Basic, SQL,CMD, Bash scripts, Assembly.

icon
More courses by Eslam Medhat

$59.99

$69.99

icon
More Hacking courses

$109.99

$27.99

$14.99

$84.99

$15.99

$11.99

icon
Reviews

4.2

560 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Anonymized User on 10/7/2021

I am already an exploit developer, but I wanted to refresh some skills. As always the vuln server is a great example. The methodology was great as well. Well done.

By Anonymized User on 8/26/2020

This course is a complete copy of the buffer overflow section of the OSCP course. (chapter 7 & I can't seem to contact you here to tell you ask you asked, so I just had to update the review)

By Michael Dailous on 5/13/2020

Overall, not bad for beginners. The author doesn't go into any real depth on the purpose of the steps, which makes some of the steps (e.g. finding bad characters) seem sort of pointless (e.g. *why* would you want to search for bad characters). It would have been good to understand the difference between the spiking and fuzzing steps, since they both seem to accomplish the same task. That said, for such a short course, it's not bad. If you're paying attention, you'll be peaked enough to go research some of the topics to get a bit more depth.

By Paul Faure on 5/3/2020

He explained each method as he did it and the why behind it. Basic information on buffer overflow but very well explained so you can understand the basics to progress. If you're looking to learn about buffer overflow then this is a great course!

By Msroth@V on 12/5/2019

Great course, easy to follow along. It's one of the courses that has made me a believer of this Platform (Udemy) Excellent examples and explanations of basic buffer overflows for Windows. Thank you!

By Anonymized User on 11/14/2019

The course was pretty good, but I found the exact same thing on youtube. The content was EXACTLY the same. Used the same web links and everything. One of these guys plagiarized the other's work.

By Adam Jhon on 11/3/2019

Absolutely perfect! Eslam really knows how to structure a course for beginners. Everything you need, to start exploit development. Definitely worth the time and money.

By Ebenezer Owusu-Afriyie on 10/12/2019

Excellent course, my first experience with a buffer overflow. It was easy to follow. The instructor is great when you ask questions, swiftly replied to all my questions. great learning material. deff will buy courses from him again. Great work

By Yew Mun Lok on 9/27/2019

Although the course is short, the teaching is concise and to the point, this is a good jumpstart to being learning exploit development. Good job to Eslam for his great work. Please do design course for using IDA pro for exploit development. All the best.

By Oscar Peña on 8/29/2019

The content is ok by now. The quality on my phone (iPhone X - after downloaded the content) is a little poor. I don’t if is the record or the app mobile, because mostly I can’t see the commands on detail... I rating the quality content, thanks!

Showing all 10 reviews on CourseDuck

Read all 560 reviews on Udemy

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 84 / 100