Skip to main content
Certifications GIAC GXPN Home projects Back to certification

Home labs & practical projects

Analyse a training-program crash reproducibly

A project to do with your own tools, with guidance on what to create and capture.

Local lab Suggested time: 3–4 hoursYour own authorised environment
01

What you could create

A deliberately faulty educational program crashes on a malformed input. The task is to understand the failure and communicate a defensive fix.

Example evidence format
Project evidence map (example)
Crash analysis with source referencesScope and inputs
Defensive fix and regression resultsDecisions and reasoning
Evidence record (example)
EvidenceWhat to capture
Crash analysis with source referencesShow the inputs, scope and decisions behind this record. The report includes enough build context to reproduce the defect.
Defensive fix and regression resultsInclude the evidence supporting your conclusion. The patched program handles the input safely without suppressing all errors.
02

What you'll need

Local lab

Use a benign local training program, debugger and disposable VM. Keep the original source, build options and triggering test input.

Project record

Keep the working files for crash analysis with source references and record assumptions as you go.

Current reference material

Use the linked provider resources to verify the features, access terms and version relevant to your project.

Access & cost

Uses your own computer. Confirm hardware capacity, software licences and download terms before setup.

Use disposable VMs, containers or a simulator. Keep the lab separate from your everyday machine and work network.

03

Suggested milestones

  1. 1

    Plan and investigate

    Reproduce the crash and record the program state at failure.

  2. 2

    Develop your approach

    Trace the input-handling defect and explain relevant memory-safety assumptions.

  3. 3

    Verify and explain

    Propose a fix and rerun normal, boundary and malformed test cases.

04

Useful resources

Use these resources to deepen your understanding and check key details.

Turn the project into evidence

Keep your artefacts and reasoning together so you can explain what you did.

A useful starting point

Use a benign local training program, debugger and disposable VM. Keep the original source, build options and triggering test input.

What a good result looks like
  • The report includes enough build context to reproduce the defect.
  • The patched program handles the input safely without suppressing all errors.

Finish the project

Save sanitised evidence, then remove the lab instances or revert to the clean snapshot. Remove temporary accounts and credentials.

Independent home-project guidance, not an official vendor lab or a claim of complete exam coverage. Use your own tools and label the work accurately.