🎯 What You'll Learn
- Fuzz applications to find crashes
- Develop stack and SEH overflow exploits
- Handle bad characters and space limits
- Use ROP to bypass DEP
About This Workbook
This track turns crashes into reliable code execution on Windows. It covers the full development cycle from fuzzing a target through stack and SEH overflows, defeating bad characters, and an introduction to ROP for bypassing DEP.
Chapter 1 — Crash to Control
Finding a crash and proving you control execution.
- Fuzzing basics
- Offset discovery
- EIP control
Chapter 2 — Stack & SEH Overflows
The two staple Windows overflow techniques.
- Classic stack overflow
- SEH overwrite
- Jump strategies
Chapter 3 — Bad Characters & Shellcode
Getting a working payload into memory intact.
- Bad-character analysis
- Shellcode generation
- Egghunters
Chapter 4 — Bypassing DEP with ROP
Executing payloads when the stack is not executable.
- DEP overview
- ROP chains
- Gadget selection
Keep going. Work through each chapter in order, then apply what you learned in the matching labs.