KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

EXP-401-OSEE

★ 126 Open GitHub ↗

A bunch of resources to prepare for the OSEE certification, Offensive Security's hardest course.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

### EXP-401 Preparation Repository
 A bunch of resources to prepare for the OSEE certification, Offensive Security's hardest course. I will personally use this repository myself, and upload my own proof-of-concept exploits for some of these bugs. I will also be actively updated this repository with more resources and other suggested exploits to try out yourself!

### Course Overview
 "Modern exploits for Windows-based platforms require modern bypass methods to circumvent Microsoft’s defenses. In Advanced Windows Exploitation (EXP-401), OffSec challenges students to develop creative solutions that work in today’s increasingly difficult exploitation environment.

The case studies in AWE are large, well-known applications that are widely deployed in enterprise networks. The course dives deep into topics ranging from security mitigation bypass techniques to complex heap manipulations and 64-bit kernel exploitation.

AWE is a particularly demanding penetration testing course. It requires a significant amount of student-instructor interaction. Therefore, we limit AWE courses to a live, hands-on environment.

This is the hardest course we offer and it requires a significant time investment. Students need to commit to reading case studies and reviewing the provided reading material each evening."
 
### Side Note
 I have been informed that the case studies in this repository are out-of-date. After looking over their syllabus provided [here](https://www.offensive-security.com/awe/EXP401_syllabus.pdf), I will ensure to update this repository when I am available (this weekend?). If you have any questions, concerns, concerning questions, or suggestions, please feel free to create an issue on this repository. I will work to resolve it.
 
### Exploits Covered In The Course (In Order)
- [ ] [CVE-2015-3104](https://www.cvedetails.com/cve/CVE-2015-3104/)
- [ ] [CVE-2017-8601](https://www.exploit-db.com/exploits/42479)
- [ ] [CVE-2015-5736](https://www.exploit-db.com/exploits/41721)

### Extra-Mile Exploits Covered In The Course
- [ ] [HackSys Extreme Vulnerable Driver](https://github.com/hacksysteam/HackSysExtremeVulnerableDriver)
- [ ] [CVE-2010-0705, CVE-2009-3523, CVE-2008-1625](https://www.exploit-db.com/exploits/12406)
- [ ] [CVE-2011-2005 / MS11-080](https://www.exploit-db.com/exploits/18176)
- [ ] [CVE-2014-4113 / MS14-058](https://www.exploit-db.com/exploits/37064)

### Recommended Preparation Exploits
- [ ] [CVE-2021-21551](https://www.crowdstrike.com/blog/cve-2021-21551-learning-through-exploitation/)

### Other Helpful Resources
- https://github.com/gscamelo/OSEE
- https://github.com/TamilHackz/windows-exploitation
- https://www.fuzzysecurity.com/tutorials.html

### Reviews
- ["My AWE Experience!!!" by Hemali](https://infosecflash.com/2018/11/04/my-awe-experience/)
- ["AWE Course Review By Offensive-Security" by Trickster0](https://trickster0.wordpress.com/2018/10/27/awe-course-review-by-offensive-security/)
- ["ADVANCED WINDOWS EXPLOITATION 2018 REVIEW" by tekman](https://www.oppositionsecurity.com/advanced-windows-exploitation-2018-review/)
- ["My Review on Advanced Windows Exploitation course by Offensive Security" by modpr0be](https://blog.modpr0.be/2019/06/04/my-review-on-advanced-windows-exploitation-course-by-offensive-security/)
- ["Offensive Security - AWE/OSEE Review" by Hashim Jawad](https://ihack4falafel.github.io/Offensive-Security-AWEOSEE-Review/)

EXP-401-OSEE

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README