Skip to content
Loading...
Courses Offensive Security

Advanced Linux Exploitation

Kernel exploitation, privilege escalation chains, container/Kubernetes escapes, eBPF abuse, and custom rootkit development on modern Linux systems.

This course includes:
  • 14 modules, 113 lessons
  • 26 hands-on labs
  • 14 quizzes
  • Lifetime course access
  • Certificate of completion
  • One certification attempt included
  • Certification is lifetime - never expires
  • 14-day refund guarantee*
* See conditions
Advanced Linux Exploitation
$2,999 One-time payment
Enroll Already have an account?
Next start: September 15, 2026
Expert
14 modules
113 lessons
26 labs

About This Course

What You'll Learn

Exploit Linux kernel vulnerabilities for privilege escalation
Escape Docker containers and Kubernetes pods
Abuse eBPF for persistence, evasion, and data exfiltration
Develop custom Linux rootkits and anti-forensic tools
Chain multiple vulnerabilities for full system compromise
Bypass modern Linux hardening: KASLR, SMEP, SMAP, seccomp

Course Curriculum

This is a preview of the course content. Register to access all lessons.
Module 1 - Linux Internals for Exploitation
8 lessons
Process Memory Layout Lesson
The Syscall Interface Lesson
Linux Security Model Lesson
The ELF Format for Exploit Developers Lesson
Kernel Architecture from Ring 3 Lesson
Lab: Building Your Exploitation Environment Hands-On
Quiz Assessment
Lab Hands-On
Module 2 - Userland Binary Exploitation
9 lessons
Stack Buffer Overflows on Linux Lesson
Shellcode for Linux Lesson
Return-Oriented Programming Lesson
Advanced Code Reuse Lesson
Format String Exploitation Lesson
Defeating Modern Mitigations Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 3 - Glibc Heap Exploitation
10 lessons
Malloc Internals Deep Dive Lesson
Use-After-Free Exploitation Lesson
Tcache Attacks Lesson
Fastbin and Small Bin Attacks Lesson
House Techniques - The Canon Lesson
House Techniques - Modern (2024-2027) Lesson
Heap Feng Shui and Exploit Reliability Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 4 - Linux Kernel Internals for Exploitation
7 lessons
The SLUB Slab Allocator Hands-On
Key Kernel Data Structures Lesson
Kernel Modules and Device Drivers Lesson
Syscall and Subsystem Attack Surface Lesson
Kernel Debugging Setup Lesson
Quiz Assessment
Lab Hands-On
Module 5 - Linux Kernel Exploitation
9 lessons
Kernel Vulnerability Classes Lesson
Spray and Heap Shaping Lesson
Privilege Escalation Primitives Lesson
Dirty Pipe - CVE-2022-0847 Lesson
nf_tables - CVE-2024-1086 Lesson
io_uring Exploitation Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 6 - Kernel Mitigation Bypass
9 lessons
KASLR Bypass Lesson
SMEP and SMAP Bypass Lesson
KPTI and Stack Isolation Lesson
Control Flow Integrity Lesson
Hardened Allocator Defenses Lesson
The Mitigation Matrix Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 7 - Container Exploitation
9 lessons
Container Internals for Attackers Lesson
Privileged Container Escapes Lesson
Capability-Based Escapes Lesson
Container Runtime CVEs Lesson
Kubernetes Exploitation Lesson
Container Escape via Kernel Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 8 - eBPF Offensive Operations
9 lessons
eBPF Architecture for Attackers Lesson
eBPF Verifier Bypass History Lesson
Offensive eBPF Programs Lesson
eBPF Rootkits Lesson
eBPF for C2 and Data Exfiltration Lesson
Detecting eBPF Attacks Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 9 - Advanced Privilege Escalation
9 lessons
Linux Capabilities Exploitation Lesson
D-Bus and Polkit Exploitation Lesson
Systemd Attack Surface Lesson
Shared Library Attacks Lesson
Filesystem and Permission Attacks Lesson
Supply Chain and Package Manager Attacks Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 10 - Linux Persistence and Rootkits
8 lessons
Userland Persistence Lesson
Userland Rootkits Lesson
Kernel Module Rootkits Lesson
eBPF-Based Persistence Lesson
Anti-Forensics Lesson
Detection Engineering Against Your Own Techniques Lesson
Quiz Assessment
Lab Hands-On
Module 11 - Embedded and IoT Linux Exploitation
8 lessons
Firmware Extraction and Analysis Lesson
Cross-Architecture Fundamentals Lesson
QEMU Emulation for Exploitation Lesson
Embedded Linux Exploitation Lesson
Hardware-Assisted Exploitation Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Module 12 - Linux Vulnerability Research
8 lessons
Source Code Auditing Lesson
Fuzzing with AFL++ Lesson
Kernel Fuzzing with syzkaller Lesson
Patch Diffing and N-Day Research Lesson
Responsible Disclosure and Bug Bounties Lesson
Practical Exercises Hands-On
Quiz Assessment
Lab Hands-On
Capstone Project
3 lessons
The Challenge Project
Deliverables Project
Assessment Criteria Project
Certification Preparation
7 lessons
Exam Overview Lesson
Domains and Weightings Lesson
Exam Environment and Rules Lesson
Preparation Strategy Lesson
Registration and Logistics Lesson
After Certification Lesson
Career Leverage Lesson