For many years, the tutorials on Corelan.be have been freely available to the public and have helped thousands of people learn about vulnerability research, exploit development, and Windows internals. They have been referenced in research papers, cited in books and conference talks, and used by security professionals around the world. Other trainers have based courses around it.The tutorials will always remain free. But reading tutorials and mastering the craft are two different things. At some point, many researchers realize they want more than written material. They want to go deeper, faster, and with direct guidance. That’s where professional training comes in. The tutorials posted on this site already cover a lot of topics, but they don't necessarily bring the full picture. Corelan's professional exploit development classes close that gap.
First of all, Corelan Training has its own dedicated website, and it may already have the answers, motivation and arguments that you need to sign up for a class.
Don't forget to also check out the Testimonials and a list of Clients that have relied on Corelan Training for professional exploit development classes. That said, self-study through articles and tutorials is a great way to get started. But exploit development is a complex discipline that benefits enormously from direct feedback and hands-on guidance. After all, documents and videos are mostly linear. They present the information in a certain way. No matter how many times you read a document or watch a video, the information is presented in the exact same way, with no room for explanation or interaction. On top of that, a good amount of documents, books (and even commercial classes) are based on misunderstandings and ideas that are either incomplete or just outright wrong. Diagrams get copied over and over again, but as technology changes, some of these drawings are no longer accurate.Reading a tutorial can create the impression that something is understood, until you try things for yourself in a debugger.
When you attend a Corelan class, you are not just consuming information — you are actively learning and applying it in real time. Concepts are not just explained, the are validated through hands-on exercises (no scripts, no handholding) We focus on evidence-based teaching, and we teach our classes on the latest versions of Windows. We spend a good amount of time explaining inner workings in detail first and then give you the tools and insights to verify things by yourself. People don't learn to use "jmp esp" or "pop pop ret". Students learns to come up with strategies by themselves. We go one level deeper.Professional training offers advantages that written materials simply cannot provide.
During training, students work directly with Peter Van Eeckhoutte, the researcher behind many Corelan Tutorials and the training materials. Peter is the only one teaching Corelan classes. You'll learn from the author directly. This allows you to:
When learning alone, it is easy to spend hours or days stuck on a small misunderstanding. In a classroom environment, those roadblocks can often be resolve in minutes. Maybe even seconds. Many students reported having AHA moments when taking a Corelan class, even after they took classes somewhere else first. Corelan classes tend to make things finally "click" During class, Peter will challenge you and verify if your reasoning is correct. Details matter. Peter has the ability to use a different analogy or propose alternative approaches. And don't underestimate the effect of learning from someone with decades of experience in terms of time-savers.
Your browser does not support HTML5 video.
If the tutorials on www.corelan.be helped you start your journey into exploit development, professional training can help you take the next step. It's the difference between reading about techniques and fully mastering them through guided practice. On top of that, Corelan classes are truly affordable. In fact, the combination covering all of Userland (Stack + Heap) is the least expensive in the market compared to major competitors. You can explore the available training courses here: