Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026
• Training hours: 09:00 - 18:00 CEST
  ‎

This course is aimed at students who have some experience with AppSec, Linux OS & Pentesting, but want to learn more about Electronics, (De)Soldering components, Reversing Circuits, Attacking Embedded & IoT Devices, etc.

If you are comfortable using a Linux Shell and know how to use a screwdriver, you should have the background knowledge required for this course.

Top Takeaways students will learn:

• Jump into the marvelous world of Hardware Hacking and get ready for your first professional IoT and Embedded security audits, researches or 0days bughunts.
• Very Technically-Oriented Hands-on Exercises (because getting your hands dirty with real stuff, is better than just reading a book)
• Learn a variety of tricks & TTPs that will make your life easier during a security audit against IoT/Embedded devices.
• Learn the basics behind: Electronics, MIPS/ARM Architectures Emulation, Reverse Engineering PCBs, dumping eMMC/NAND/NOR memories, how to hunt & use: BootStrap Pins & Debugging Protocols, etc.
• Learn how to properly design and threat model a Secure IoT product.

Detailed description and trainer's bio

• 4 days training
• 15 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026
• Training hours: 09:00 - 18:00 CEST
  
  ‎

This 4 day training course will teach you how to exploit advanced .NET enterprise targets, bypass mitigations, chain bugs and pop shellz!
We will be exploiting more than 15 remote code execution chains (total of 25 single bugs): these vulnerabilities will all be unique in their style and target real world software.

During the class, we'll walk you through bypassing mitigation, discovering and chaining complex vulnerabilities, the tricks and techniques based on each target and many more exciting subjects.
This is going to be 32 hours of intensive reverse engineering and exploitation to develop your intuition for finding and exploiting bugs in .NET environments.

Prior to enrolling in this course, students are encouraged to undertake a self-assessment challenge to ascertain if the course aligns with their objectives and proficiency level.

Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026
• Training hours: 09:00 - 18:00 CEST
  ‎

This is a training for Web hackers who want to master their toolbox. Burp Suite Pro is the leading tool for auditing Web applications at large, but also a complex beast where new features get added every few weeks.

Mastering Burp Suite Pro, including its newest features, allows testers to get the most out of the tool, optimizing time spent auditing and testing. Work will be faster (hotkeys!) and much more efficient (bambdas!). Attendees will also learn to measure and assess the quality of their attacks, a crucial skill in real-life engagements that can make the difference between a false-negative and a critical finding.

Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026
• Training hours: 09:00 - 18:00 CEST
  ‎

The primary objective of this course is to demystify the Windows Heap and provide students with a research-driven mindset. Participants will learn to understand heap managers through experimentation, master precise heap manipulation (including proprietary techniques like Corelan’s Memorigami), and develop reliable exploitation strategies across various bug classes. The course focuses on building fundamental knowledge that remains applicable regardless of OS updates, moving beyond simple "tricks" to a deep technical understanding of memory management.

Check the Heap Training, Testimonials and Clients pages on Corelan web site.

Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026

• Training hours: 09:00 - 18:00 CEST
  
  ‎

• Security-relevant Linux kernel internals and attack surface.

• Kernel privilege escalation techniques.
• Exploiting vulnerabilities in stack, global, and Slab (heap) memory.
• Exploiting use-after-free and out-of-bounds vulnerabilities.
• KASLR, SMEP, SMAP, and KPTI bypasses.
• In-kernel Return-Oriented Programming (ROP).
• Data-only kernel exploitation techniques.
• Cross-cache and cross-allocator attacks.
• Page table–based exploitation techniques.

Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Monday, September 28, 2026
• End: Thursday, October 1, 2026
• Training hours: 09:00 - 18:00 CEST
  
  ‎

This comprehensive fast paced 4-day training delivers an in-depth exploration of iOS and Android application security, OS internals, and the application of AI in mobile pentesting.

‎

By the end of this course, students will possess the advanced skills to reverse engineer, design, develop, and secure iOS and Android applications, equipped with a deep understanding of the latest security measures in both the userland and the kernel. Slides, and detailed documentation on the labs will be provided to the students for practice after the class. Corellium access will be provided to students during the duration of the training course.