Hi,
  I was wondering if anyone on the board has take the CASS course - http://www.infosecinstitute.com/courses/web_application_hacking_online.html  From the syllabus, it looks like one of the most comprehensive web application security courses and goes into a lot of details.  Has anyone taken the course online or attended it live (in something like ChicagoCon for example)?  What were you impressions.  Thanks.

Kris, none of the courses goes into too much depth.  However, the OSCP: BackTrack to the Track should cover this in detail.  In the first OSCP course, this is also covered and you have to understand how exploits work, writing your own, etc.  The course isn't entirely focused on developing exploits but you have to know how to write your own + a little light fuzzing.  SANS also recently introduced a new course (709) dedicated to exploit development - http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,3389.msg15722/topicseen,1/