Windows exploit development, custom shellcode, DEP/ASLR bypass.
6 exam domains — click "Syllabus" tab for full breakdown