OM-410
Vulnerability Research
Expert-level software security research.
Our most advanced course. You study how software fails at a low level, how modern platforms defend against it and how to run, document and responsibly disclose a research project.
- 160 hours
- Study time
- 90 days
- Lab access
- 12
- Lab machines
- 4
- Formats
Outcomes
What you will be able to do
Learning outcomes you can point to in your work.
- Analyse compiled software with confidence
- Explain platform security mitigations in depth
- Run a structured research project
- Disclose findings responsibly to vendors
- Prepare for the OMCE exam
Syllabus
6 modules, 44 guided exercises
Module titles and topics are shown here. Full lessons and lab exercises open when you enrol.
Module 1: Research foundations
- Research methodology
- Lab setup
- Legal and ethical boundaries
4 exercises
Module 2: Reverse engineering
- Disassemblers and debuggers
- Program structure
- Binary formats
10 exercises
Module 3: Memory safety
- Memory models
- Bug classes
- Root-cause analysis
10 exercises
Module 4: Platform mitigations
- Compiler protections
- Operating system defences
- Mitigation research
8 exercises
Module 5: Automated analysis
- Fuzzing concepts
- Triage
- Coverage
8 exercises
Module 6: Disclosure and write-ups
- Vendor coordination
- Advisories
- Technical writing
4 exercises
Prerequisites
Before you begin
- OMPE or OMRE, or equivalent experience
- Working knowledge of C and assembly
What is included
Everything in the course
- Video lessons
- Written course guide
- Research labs
- Exam simulator
- 90 days of lab access
- 12 lab machines
The credential
Prepare for OMCE
This course is the preparation for the OffensiveMind Certified Expert exam. Finish the course, practise in the labs and sit the proctored practical when you are ready.
OMCE
OffensiveMind Certified Expert
The top of the ladder: vulnerability research.
View credential