Ethical Hacking & Bug Hunting: Buffer Overflow For Beginners (Udemy.com)
Learn how to exploit Buffer Overflows on Windows systems. Get a shell! (Reverse engineering and Exploit development).
Created by: Eslam Medhat
Last updated July 2019
What you will learn
- Fuzzing applications.
- Using a debugger to examine the crash.
- Identifying error conditions using debugging.
- Targeting the EIP register.
- Identifying bad characters.
- Locating the vulnerable module.
- Exploit Development.
- Creating final exploit code.
- Gain Remote Code Execution on Windows.
How it compares
Against the other 523 rated Udemy courses in Hacking on CourseDuck:
- Rating4.2 out of 5higher than 12% of them
- Reviews560#259 of 524 by number of reviews
- Length1.4 hoursshorter than 91% of them
- Last updatedJuly 2019earlier than 88% of them
Course Description
The primary goal of this course is to provide you with practical exposure to the world of bug hunting. After taking this course, you will have a better understanding of the approaches (reverse engineering, exploit development) that bug hunters use to find security vulnerabilities. You will learn how to exploit Buffer Overflows on Windows systems. This is an initial course and begins from the very basics of exploitation and is beginner-friendly.
The difficulty is that most IT professionals do not have the general software development background required to begin the subject of buffer overflow. This course cuts down the technical subjects of computer memory management, controlling code, and data inside of a working program, and exploiting poor quality software into terms that IT people with no software development knowledge can understand.
A buffer overflow is a popular software coding error that an intruder could use to take control over your system. To efficiently decrease buffer overflow vulnerabilities, it is necessary to understand what buffer overflows are, what threats they act to your applications, and what methods attackers use to successfully exploit these vulnerabilities.
In this course, you will learn how to use different tools such as Immunity Debugger, Mona library for Immunity Debugger, Metasploit, msfvenom, Spike, File Fuzz and much more. This course is intended to be practical.
In this course, we will answer the following questions:
What is Buffer Overflow?
How do buffer overflow attacks work?
How to find buffer overflow vulnerabilities?
How to write a buffer overflow exploit?
Syllabus:
Reverse engineering.
Fuzzing applications.
Using a debugger to examine the crash.
Identifying error conditions using debugging.
Targeting the EIP register.
Identifying bad characters.
Locating the vulnerable module.
Creating final exploit code.
Exploit development.
Gain Remote Code Execution on Windows.
With this course you'll get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you within 10 hours.
NOTE: This course is created for educational purposes only.
Instructor Details
- 4.2 Rating
560 Reviews
Eslam Medhat
is a professional pen-tester and ethical hacker with over 9 years of IT experience bringing a strong background in programming languages and application security, ranging from network and system administration to exploit research and development. He reported various vulnerabilities for high profile companies and vendors (such as Microsoft, Yahoo, Sony, AVG, Bitdefender, Facebook and many more) and was successfully acknowledged by them.
Certifications:
- OSCP
- CEH (Certified Ethical Hacker)
- GPEN
- GWAPT
- CCNA and CCNA Security
- MCITP
- Advanced Linux&InfoSEC
Technical Skills:
Security: Application and network penetration testing, source code review, Incident Response, protocol analysis, fuzzing, reverse engineering, antiDDoS, IDS.
Languages: PHP, JavaScript, Java SE, C++, C#, Python, Visual Basic, SQL,CMD, Bash scripts, Assembly.
More courses by Eslam Medhat
Website Hacking & Penetration Testing (BUG BOUNTY) (2020)
4.2 (696 Reviews)
Provider: Udemy
Time: 2.1h
$59.99
Mobile Application Hacking and Penetration Testing (Android) (2020)
4.2 (597 Reviews)
Provider: Udemy
Time: 1.5h
$69.99
More Hacking courses
Getting Started with Wireshark: The Ultimate Hands-On Course (2025)
4.8 (12,167 Reviews)
Provider: Udemy
Time: 4.4h
$109.99
The Ultimate Dark Web, Anonymity, Privacy & Security Course (2025)
4.8 (9,329 Reviews)
Provider: Udemy
Time: 10.3h
$27.99
Computer Basics for Beginners: Understanding Computer Basics (2025)
4.8 (4,524 Reviews)
Provider: Udemy
Time: 5.8h
$14.99
Ultimate F5 LTM Training from Beginner to Expert 2026
4.8 (1,927 Reviews)
Provider: Udemy
Time: 13.5h
$84.99
IP Addressing and Subnetting - Hands-on Learning Approach (2020)
4.8 (1,522 Reviews)
Provider: Udemy
Time: 4.2h
$15.99
Cisco BGP Masterclass for Enterprise Network Engineers (2026)
4.8 (1,369 Reviews)
Provider: Udemy
Time: 16.4h
$11.99
Reviews
By Anonymized User on 10/7/2021
I am already an exploit developer, but I wanted to refresh some skills. As always the vuln server is a great example. The methodology was great as well. Well done.
By Anonymized User on 8/26/2020
This course is a complete copy of the buffer overflow section of the OSCP course. (chapter 7 & I can't seem to contact you here to tell you ask you asked, so I just had to update the review)
By Michael Dailous on 5/13/2020
Overall, not bad for beginners. The author doesn't go into any real depth on the purpose of the steps, which makes some of the steps (e.g. finding bad characters) seem sort of pointless (e.g. *why* would you want to search for bad characters). It would have been good to understand the difference between the spiking and fuzzing steps, since they both seem to accomplish the same task. That said, for such a short course, it's not bad. If you're paying attention, you'll be peaked enough to go research some of the topics to get a bit more depth.
By Paul Faure on 5/3/2020
He explained each method as he did it and the why behind it. Basic information on buffer overflow but very well explained so you can understand the basics to progress. If you're looking to learn about buffer overflow then this is a great course!
By Msroth@V on 12/5/2019
Great course, easy to follow along. It's one of the courses that has made me a believer of this Platform (Udemy) Excellent examples and explanations of basic buffer overflows for Windows. Thank you!
By Anonymized User on 11/14/2019
The course was pretty good, but I found the exact same thing on youtube. The content was EXACTLY the same. Used the same web links and everything. One of these guys plagiarized the other's work.
By Adam Jhon on 11/3/2019
Absolutely perfect! Eslam really knows how to structure a course for beginners. Everything you need, to start exploit development. Definitely worth the time and money.
By Ebenezer Owusu-Afriyie on 10/12/2019
Excellent course, my first experience with a buffer overflow. It was easy to follow. The instructor is great when you ask questions, swiftly replied to all my questions. great learning material. deff will buy courses from him again. Great work
By Yew Mun Lok on 9/27/2019
Although the course is short, the teaching is concise and to the point, this is a good jumpstart to being learning exploit development. Good job to Eslam for his great work. Please do design course for using IDA pro for exploit development. All the best.
By Oscar Peña on 8/29/2019
The content is ok by now. The quality on my phone (iPhone X - after downloaded the content) is a little poor. I don’t if is the record or the app mobile, because mostly I can’t see the commands on detail... I rating the quality content, thanks!
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 84 / 100








