Hot answers tagged research
4
Paraphrasing someone who does this for a living: “Exploiting vulnerabilities is a craft. Researching vulnerabilities is a black art.”
A common way of looking for vulnerabilities in software (or hardware or a combination) is fuzzing. Look at some interface and throw all kinds of garbage at it. If it keeps operating correctly (“access denied”, “syntax error”, ...
4
Security + Distributed Systems narrows down the attack pattern significantly. I can only think of one condition in which these two domain come into play... money.
What if finical transactions where backed with an eventually consistent database? Maybe it would net thieves around $1 million USD. Non-relational databases are all the rage, but what if you ...
2
I use a lot of the basic UNIX tools. grep, awk, cut, head, tail, cat and vim. This is when the source code is there. If not, I hit IDA =)
Basically what I do is either search for functions that get implemented wrong often (memcpy, malloc, open those kinds of functions). And scroll back till I get the origin of the variables used as arguments. When these are ...
Only top voted, non community-wiki answers of a minimum length are eligible
