Reverse Engineering and Exploit Development (Udemy.com)
Application Penetration Testing for Security Professionals
Created by: Infinite Skills
Last updated January 2017
Our take
Based on the ratings of 1,294 students, a sample of their written reviews and the syllabus, as the course stood in January 2017. No course pays to be reviewed.
The course is an Infinite Skills title led by Philip Polstra, 70 lectures and about six hours of video split across twelve sections. It moves from reversing compiled Windows apps (stack and heap overflows, fuzzing) into OS X, Linux and Android, then closes with web exploitation, exploit payloads, and a short stretch on ARM. It is labeled beginner level, but several reviewers say that label is generous: without some comfort in C and assembly, the low level material goes by fast.
Reviewers like the pacing of individual lectures, short and to the point, and the range covered in one course: Windows, OS X, Linux and Android reversing side by side. Travis Fritz calls out the buffer overflow examples and the debugging and compiling tool walkthroughs as clear, and Ricardofc praises the clear explanations across 32-bit, 64-bit and different operating systems. The complaints cluster around depth and upkeep. Several reviewers say working files do not match what is shown on screen, the exploits target vulnerabilities already patched by DEP and ASLR on modern Windows, and some of the tools used are no longer available for download. A few also note the instructor does not respond to questions.
There are no quizzes, coding exercises, or projects here, just narrated video and working files, so it plays more like a survey than hands on training. That fits its beginner billing loosely: reviewers who already had some reverse engineering background call it a decent refresher, while true newcomers report getting lost on setup and low level explanations. Anyone prepping for something like OSCE will need to supplement it. As a paid overview of exploit development concepts across several operating systems, it still does what it sets out to do.
Pros
- Covers Windows, OS X, Linux and Android reversing in one course
- Lectures are short and described as clear and to the point
- Good starting point for stack and heap overflow concepts across OSes
- Touches web exploitation and ARM exploitation, not just Windows
Cons
- Last updated in 2017, so labs assume tools and OS versions that predate DEP and ASLR defaults
- Working files reportedly do not always match what is shown in the videos
- Reviewers say the instructor does not respond to student questions
Nice explanation, great flow among the videos. Each video short and precise and no unnecessary talk.
Marked beginner, but reviewers with some C, assembly or computer architecture background get the most out of it; true newcomers may struggle.
What you will learn
- Learn more about various reversing tools
- Learn more about common vulnerabilities and how to find them
- You will become more familiar with simple exploits, web exploitation, and ARM exploitation
Course content
12 sections · 70 lectures · 6.1 hours of video 1 article
- 1Getting Started 3 free previews11 lectures · 42 min
- 2Reversing Compiled Windows Applications26 lectures · 2.5 hours
- 3Reversing Compiled OS X Applications3 lectures · 12 min
- 4Reversing Compiled Linux Applications12 lectures · 1.1 hours
- 5Reversing Android Applications2 lectures · 8 min
- 6Finding Other Vulnerabilities2 lectures · 11 min
- 7Simple Exploits5 lectures · 27 min
- 8Exploit Payloads4 lectures · 22 min
- 9Making Exploits Harder To Detect2 lectures · 11 min
- 10Web Exploitation1 lecture · 4 min
- 11ARM Exploitation1 lecture · 4 min
- 12Future Directions1 lecture · 6 min
Who it is for
The instructor says it suits
- Anyone interested in Reverse Engineering and Exploit Development
What you need before you start
- This course is designed for beginners who are looking to get started in security, penetration testing, and reverse engineering.
How it compares
Against the other 523 rated Udemy courses in Hacking on CourseDuck:
- Rating4.2 out of 5higher than 12% of them
- Reviews1,294#158 of 524 by number of reviews
- Length6.1 hourslonger than 56% of them
- Last updatedJanuary 2017earlier than 97% of them
Course Description
In this Reverse Engineering and Exploit Development training course, expert author Philip Polstra will teach you about common software vulnerabilities and how to find them, as well as how the vulnerabilities differ between various operating systems. This course is designed for beginners who are looking to get started in security, penetration testing, and reverse engineering.
You will start by learning about reversing compiled Windows applications, including using fuzzing, stack overflows, and heap overflows. From there, Philip will teach you how to reverse compiled OS X, Linux, and Android applications. This video tutorial also covers how to find other vulnerabilities, including website and database vulnerabilities. Finally, you will learn about simple exploits, web exploitation, and ARM exploitation.
Once you have completed this computer based training course, you will be fully capable of finding vulnerabilities and developing exploits for them. Working files are included, allowing you to follow along with the author throughout the lessons.
Instructor Details
- 4.2 Rating
1,294 Reviews
Infinite Skills
Infinite Skills is a Canadian based company who offer a huge and ever growing range of high quality eLearning solutions that teach using studio quality narrated videos backed-up with practical hands-on examples and comprehensive working files. All courses are created by trained educators and experts in video based education.
The emphasis is on teaching real life skills that are essential for progressing in today's commercial environment.
More courses by Infinite Skills
Microsoft Excel 2013 Advanced. Online Excel Training Course
4.6 (3,848 Reviews)
Provider: Udemy
Time: 9.9h
$15.99
Master SketchUp - A Definitive Guide From Infinite Skills (2017)
4.5 (3,824 Reviews)
Provider: Udemy
Time: 5.4h
$22.99
Adobe InDesign Made Easy. A Beginners Guide To InDesign (2017)
4.5 (3,719 Reviews)
Provider: Udemy
Time: 11h
Free
Microsoft SQL Server 2012 Certification Training Exam 70-461
4.7 (3,538 Reviews)
Provider: Udemy
Time: 12.3h
$11.99
More Hacking courses
Getting Started with Wireshark: The Ultimate Hands-On Course (2025)
4.8 (12,167 Reviews)
Provider: Udemy
Time: 4.4h
$109.99
The Ultimate Dark Web, Anonymity, Privacy & Security Course (2025)
4.8 (9,329 Reviews)
Provider: Udemy
Time: 10.3h
$27.99
Computer Basics for Beginners: Understanding Computer Basics (2025)
4.8 (4,524 Reviews)
Provider: Udemy
Time: 5.8h
$14.99
Ultimate F5 LTM Training from Beginner to Expert 2026
4.8 (1,927 Reviews)
Provider: Udemy
Time: 13.5h
$84.99
IP Addressing and Subnetting - Hands-on Learning Approach (2020)
4.8 (1,522 Reviews)
Provider: Udemy
Time: 4.2h
$15.99
Cisco BGP Masterclass for Enterprise Network Engineers (2026)
4.8 (1,369 Reviews)
Provider: Udemy
Time: 16.4h
$11.99
Reviews
By Fabian Bakkum on 12/15/2021
The focus in this course is on exploit development in particular, not reverse engineering in general. All in all it gives you a nice overview, but don't expect to gain a deep understanding from this course, but it gets your feet wet. Some things are overexplained, but others lack a bit of explanation, in particular, I would have liked more explanation on how programs are executed at the low level as I do not have any real experience programming in assembly.
By Joseph White on 11/24/2020
This is a fantastic course. If you are diving into REM or Ethical Hacking - this course will explain several things in a different way that will make exploitation easier. I've seen and used other methods, but the ones used in this course simplify them and are straight forward. This course is worth it. Would love to see a Course on Advance Reverse Engineering Malware where there is a complete walkthrough and explanation on at least 3 different types of malware. The techniques and the "why" do this, and not that explanations. I'm really getting into REM, but I wonder if I'm missing stuff. Hiring managers want to see experience and if a student if faulty they will never get hired if they don't know the actual material & how to work through it. Just a suggestion! Great Course!!!
By Robert Goble on 4/21/2020
I have a few years of RE experience and was taking this class to see if it was something I could recommend to my new employees. Overall I feel like there was some good information covered in this class, I like that you gave examples of some different tools and where to get them. Unfortunately I felt like the order of some of the videos was just wrong. It reminded me of an episode of the TV show "Ice Road Truckers" on Discovery channel where they keep jumping back and forth among different areas. I feel this class and the information taught would have been much more effective if the videos were ordered better and you completed 1 area before jumping to the next. For example you talk about stack overflows and give partial information, then jump to heap overflows with partial information, then format strings. Quite a few videos later you go back to stack overflows and give more details but by then anything you talked about in the first video is most likely going to have been forgotten. This happened numerous times with different content sections. At one point I paused a video to make sure I didn't have some random order button turned on for the videos. I feel if you just covered stack overflows from start to finish, before jumping into heap overflows it would have been much more intuitive. My next issue was that I think took away from the class was your bias towards Linux. I also like to use Linux, but your bias against Windows is obvious. I feel that do to your bias against Windows, some of the information you provided could give less knowledge people the wrong idea about it. In one video you state Linux is better because gcc automatically provides stack protection and won't let you execute code on it by default. Well newer compilers and versions of Windows do the same thing, but the way you word it makes it sound as if it doesn't. You are comparing newer versions of Ubuntu against Windows XP which has been EOL for years.
By Dan Mazzella on 9/18/2019
a good crash course in reversing but needs updating as a lot of these vulnerabilities have been addressed with DEP/ASLR so they wont work on Win10 unless you shut those off, a lot of these tools dont exist anymore / are not Win10 friendly so youll need to find alternatives; otherwise, youll need to have a windows XP ISO handy for the labs. if you have a comp sci background (are somewhat familiar with C / assembly / computer architecture), this is good for someone who sort of knows what they are doing. If you are a true beginner, a lot of this will be over your head.
By Kıvanç Aydın on 3/12/2019
It's really hard to rate this. Dr. Phil is amazing. I wish I were his student. Content is good. But when it is come to rating i need to be honest to community. Presentation is bad. It is really hard to follow. While he is telling about something in CLI or analysing some code i couldnt catch him. It maybe my problem but in my opinion there should be some video effects such as hovering, putting arrows etc... Even i give 3.5 starts i think it's the best course about Reverse engineering on Udemy. Thank you Dr. Phil.
By Pedro on 12/14/2017
For $10 it's a good introductory course. - The information presented is more introductory than anything else, which is good, but it wasn't as in-depth as I had expected. You'll get an idea of what tools to use, and the types of exploits issues you might find in code, as well as the general process of writing an exploit and adding it to Metasploit, but it is all essentially an overview and you will have to go find a lot more resources afterwards to truly learn how to properly do any of these things. (All the information provided could probably just fit into a wikipedia article). - There is also a lot of fluff that is not really necessary. (Eg. The OSX and Unix sections are pretty much just the same as the Windows sections and are longer than they really should be. The Web Exploitation section seems shoe-horned and is completely irrelevant). - The quality of audio/video is great. Prof. does speak slowly so you can probably watch the whole thing in x2 speed.
By C W on 8/7/2017
There is a lot to cover on this topic, and I think this course does a good job at giving an intro to many different concepts that someone would need to learn about in order to do exploit development. Examples were easy to follow, and material was well explained. I would like to see a deeper dive in a more advanced course by this same author, specifically into either Windows or Linux vulnerability exploitation (heap exploitation, UAF exploitation, etc). Great course!
By Tomas Juodokas on 4/27/2017
As an computer science student i would like just to mention, that this course does not include assembly beginner guide, to start this course you should have some basic knowledge of assembly. If we would talk about overall course quality for beginners is great, the actual one thing i missed in this course was more briefly explained theory over the exploits development.
By Devin Neal on 5/25/2016
The instructor goes through all of the important details necessary to get started with reverse engineering. Any areas where more detail is desired can easily be supplemented with a quick google search. The course also goes nicely with the one on assembly.
By Brian Crane on 7/27/2015
If you want to be an Ub3rl1t3H4x0r (or defend against them) this is the place to start. Nut-and-bolts down-on-the-metal intro to how exploits are created and how they work. The instructor shows you how the dark arts work step-by-step in easy bite-sized info-bits. Now finally I now know exactly what a Stack Overrun and a Heap Overrun vulnerability are and how to create them I also know what a no-op sled is and many other concepts. I've been through the course twice now and still I haven't mined all the knowledge out of it because so much is presented. This course is a most valuable starting point for any security researcher. Best course I've taken in years. I highly recommend this course!
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 84 / 100












