OSED: Windows User Mode Exploit Development (EXP-301) FAQ – OffSec Support Portal

This article provides essential information about the EXP-301 course, prerequisites, enrollment options, lab extensions, certification, and support resources to help learners prepare for their OffSec training journey.

What is EXP-301?
What are the prerequisites for EXP-301?
What competencies will I gain?
How can I enroll in the EXP-301 course?
Can I purchase a lab extension?
How do I certify after completing EXP-301?
Additional Resources and Support
Still have questions?

What is EXP-301?

EXP-301 is an intermediate-level, self-paced course focused on developing modern exploit development skills specifically for Windows user-mode environments. The course covers buffer overflow techniques, crafting custom exploits, bypassing security mitigations like DEP and ASLR, shellcode writing, format string exploits, and reverse engineering tools like WinDbg and IDA Pro. Successful completion of this course leads to the OffSec Exploit Developer (OSED) certification.

This course is ideal for penetration testers, exploit developers, security researchers, malware analysts, and software developers working on security products.

What are the prerequisites for EXP-301?

Before starting EXP-301, learners should have the following skills:

Familiarity with debuggers such as ImmunityDBG and OllyDBG.
Understanding of basic exploitation concepts on 32-bit systems.
Ability to write Python 3 code.

The following optional skills are recommended

Basic ability to read and understand C programming code.
Basic skills in reading and understanding 32-bit Assembly language.

These prerequisite skills can be obtained by completing the Penetration Testing with Kali Linux (PWK) course and earning the OSCP certification.

What competencies will I gain?

By completing this course, you will learn to:

Use WinDbg for debugging and exploit development.
Write your own shellcode for Windows user-mode exploits.
Bypass common security mitigations such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR).
Exploit format string vulnerabilities.
Build foundational skills in finding and exploiting bugs in binary applications.

How can I enroll in the EXP-301 course?

EXP-301 is available through eligible OffSec training products, including the Course and Cert Exam Bundle, Learn One, and Learn Enterprise Subscription options.

If you are a new customer and wish to purchase, please see here.
If you are an existing customer, please sign in and go to the “Buy More” page to purchase. For course selection guidance, you may visit here.
If you are purchasing training for a team or organization, please contact the OffSec Sales team for help with license quantities, enterprise training options, onboarding, and product selection.

Can I purchase a lab extension?

If you are enrolled in EXP-301 through the Course and Cert Exam Bundle, you are eligible to purchase lab extensions in 30-day increments.

Lab extensions are not available for Standalone OffSec Certification Exams, CyberCore, Learn One, or Learn Enterprise subscriptions.

Lab extensions do not include additional exam attempts. If you need another exam attempt, please review the applicable exam retake options.

You can purchase eligible lab extensions through the Buy More option in your OffSec Learning Library. If you still have active lab access, the extension begins immediately after your current access ends. If your lab access is no longer active, you may choose a start date within six weeks from the date of purchase.

Related articles