{"id":5241,"date":"2025-11-14T19:58:22","date_gmt":"2025-11-14T17:58:22","guid":{"rendered":"https:\/\/www.corelan-certified.com\/index.php\/value\/"},"modified":"2025-11-14T19:58:29","modified_gmt":"2025-11-14T17:58:29","slug":"value","status":"publish","type":"page","link":"https:\/\/www.corelan-certified.com\/index.php\/value\/","title":{"rendered":"Value"},"content":{"rendered":"\n \n
\n
\n
\n
\n
\n
\n
\"\"<\/span>\n <\/div>\n <\/div>\n
\n
\"\"<\/span>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n
\n
\n

What does CCED demonstrate?<\/h3>\n

The Corelan Certified Exploit Developer (CCED) title is designed to validate a comprehensive set of skills, knowledge, and professional qualities essential for high-level exploit development in the Microsoft Windows Userland environment.  It is not designed for the masses, it rewards exceptional skill and dedication, by requiring examinees to pass 5 different phases in an exam that may take months to complete.   
\n
It also stimulates continued learning. 
\n
CCED represents excellent skills in the following areas:
\n
1. Strong Theoretical Foundation<\/span>\n
CCED demonstrates a deep understanding of Windows Userland processes, memory management, stack and heap usage, common memory corruption types, and techniques to bypass exploit mitigations.
\n
2. Practical Exploit Development Skills<\/span>\n
CCED Proves the ability to develop reliable exploits for both stack-based and heap-based vulnerabilities in complex software environments. This includes identifying and leveraging exploit primitives, understanding heap internals, navigating memory layouts, and chaining techniques to achieve successful exploitation. In the practical phase, examinees have to complete a wide variety of challenges.
\n
3. Ability to Learn and Apply New Concepts<\/span>\n
Going further, CCED demonstrates the skill to read, understand, and apply technical documentation and whitepapers related to exploitation techniques, and to integrate newly acquired knowledge into practice.
\n
4. Independent Research Skills<\/span><\/span>\n
CCED also represents the ability to investigate novel topics, synthesize complex information, and perform self-directed research using publicly available resources.
\n
5. Technical Communication and Justification<\/span>\n
Demonstrates the ability to produce clear, detailed technical documentation, explain design and development decisions, and defend the reasoning behind exploit strategies and implementation choices.  It shows that you know \"WHAT<\/span>\", \"WHY<\/span>\" and possess the skills to explain.
As part of the evaluation, each examinee must successfully complete a one-on-one interview with Peter Van Eeckhoutte, during which their work, choices, and understanding will be critically examined.
Passing this interview enables Peter to personally vouch that the candidate possesses substantial, real-world skills and a deep understanding of exploit development.
\n
Long-Term Commitment to Mastery<\/span>\n
While most exams and certificates simply represent a snapshot in time, the Corelan Certificate also represents the choice and capacity to maintain and refine technical skills over time\u2014to stay current with evolving security mechanisms and exploitation strategies, and to remain a high-value, trusted professional in the field.  
\n
After 3 years, CCED title holders have the option to submit evidence once per year that they dedicate efforts to continue to learn and evolve.   It's a choice, not an obligation.
\n
The status page will reflect the last date of submission (of relevant evidence).\n <\/p>\n <\/div>\n <\/section>\n

\n
<\/div>\n <\/section>\n
\n
\n
\n