Corelan: Stack based exploit development / Heap exploitation masterclass

Taught by Peter “corelanc0d3r” Van Eeckhoutte (Corelan), in partnership with Tanto Security, we bring you 2 of the most sought-after exploit development courses around! Check out the testimonials: https://www.corelan-training.com/index.php/testimonials/

The training will be making its debut in Melbourne for this edition following a number of successful years in Sydney.

Expert-level STACK

Our expert-level STACK based exploit development course is the perfect introduction into the fine art of exploit development for x86 Windows. It’s a real, hands-on, intense, instructor led course, offering a mix between fundamentals of exploit development and more advanced topics such as ASLR bypass and ROP.

Even if you’ve taken other classes on stack exploits, this training will challenge what you think you know. Led by Peter Van Eeckhoutte, founder of Corelan and creator of mona.py, this course shatters common myths, fills critical knowledge gaps, and teaches you to build reliable, real-world exploits like a pro. You won’t just learn what to do — you’ll understand why it works.

More details: https://www.corelan-training.com/index.php/training/stack/

HEAP Masterclass

The HEAP Masterclass takes off where other courses end. After a quick refresher on ASLR & DEP, the course dives deep into the fascinating world of heap exploitation (UseAfterFree, Heap Overflows, Controlled Read/Write, Type Confusion, Double Free, Uninitialized memory, etc) and the fine art of memory leaks. Corelan delivers the ultimate deep dive into the Windows Heap Manager—unmatched in depth and detail. Walk away equipped with universal expertise, game-changing insights, and the skills to master the heap with confidence. Our unique approach prepares you for future Windows versions as well.

More details: https://www.corelan-training.com/index.php/training/heap/ 

When

Expert-level STACK based exploitation class: Tuesday 03rd February 2026 – Friday 06th February 2026 (4 days)
HEAP Exploitation Masterclass: Monday 09th February 2026 – Thursday 12th February 2026 (4 days)

9am till 5pm each day - Please arrive at least 15 minutes prior.

Where

Melbourne, VIC - venue to be announced

Student Requirements

Technical Prerequisites
Students will receive an email with detailed instructions (on how to set up lab Virtual Machines) about 2 weeks before the start of the class.

Skills
Stack:

• be able to read simple C++ code and simple scripts

• be familiar with writing basic scripts using python/ruby/…

• some basic experience with asm is useful, but not a must

• be fluent with managing Windows / Linux operating system and with using the virtualization software on your laptop

• be familiar with using Metasploit (msfconsole, msfvenom, meterpreter)

Heap:

• be able to read and write simple C/C++ code and simple scripts (python, javascript)

• truly master all basic concepts of exploit development, as listed in our "Stack" course.  If you have taken the Bootcamp/Stack course and done a lot of practice after taking the class, then you’re probably ready for this class. 

• be familiar with ROP (i.e. understand how it works on Windows, know how to build a ROP chain, know how to use mona.py to generate a chain and how to fix the chain if it doesn’t work)

• be familiar with using debuggers (we’ll use WinDBG for most part of the course, but we’ll spend some time explaining the basics of using WinDBG.  It is assumed that you have practical experience with a debugger such as windbg or immunity debugger)

• be fluent with managing Windows / Linux operating system and with using the virtualization software on your laptop

• be familiar with using Metasploit to generate shellcode (msfvenom, msfconsole) and managing meterpreter sessions

• have basic practical knowledge of x86 assembly

Legal Prerequisites
It will be required to sign a confidentiality agreement at the start of the course. You will not be admitted to the course without signing this document. You can find a copy of the document here.

What to bring

A laptop, capable of running 2 VMs simultaneously, and some virtual machines.  Instructions on how to set up the VMs will be provided shortly before class begins.

Please note that catering will not be provided.

Pricing & Ticket info

A ticket is only valid once payment has been fully executed. Early bird tickets must be paid in full before 01st October.

Breakdown of fees

While we try to keep the ticket costs down as much as possible, some fees from the platforms and government taxes do apply:

• Humanitix fee: 1.3% + $0.50 (applies to all ticket)

• Stripe fee: 1.7% + $0.30 (applies only when paying through Stripe)

• GST: 10% (applies to all tickets)