White-box web app testing, source code review, custom exploit chains.
6 exam domains — click "Syllabus" tab for full breakdown