Understand Windows internals. Exploit vulnerable drivers. Build privilege escalation chains.
Familiarity with C and x64 assembly is recommended.
Certified Windows Research & Exploitation
Demonstrate your research and exploitation skills in a hands-on practical exam.
For practitioners investing in their own skills.
One payment. Lifetime access and curriculum updates.
Enroll nowEarly access pricing. Price will increase after launch.
For organizations training multiple practitioners.
Tell us about your team to discuss access and pricing.
Discuss team accessQuestions about the training and the exam.
Familiarity with C, x64 assembly, and operating system fundamentals is recommended. This is not a beginner course.
A host machine running Windows 10/11 or Linux with a Type-2 hypervisor (VMware Workstation or Hyper-V). Minimum 16GB RAM recommended, 32GB ideal. You'll run nested VMs for kernel debugging. You set up your own lab environment; we provide the drivers used in the practical exercises.
At a steady pace (10–15 hours/week), expect 3–4 months to complete all modules and labs. You have lifetime access, so you can go at your own speed. The exam can be taken anytime after course completion.
The CWRE exam is a 48-hour, hands-on assessment. No multiple choice. You receive a hardened target and must demonstrate real exploitation research skills
You get access to a private Discord server with other students and instructors. Support is best-effort, typically within 24 hours. Early Access students also get direct access to the course author for technical questions.
No. Security developers, driver developers, and anyone who needs to understand Windows kernel internals will benefit. The research methodology applies whether you're building defenses or analyzing attack techniques.
