# How do hackers find vulnerability? [closed]

Is it a rigorous trail and error exercise or do they actually read the whole code to "think" about it to find the vulnerable point?

## closed as too broad by Steffen Ullrich, Mark Buffalo, rook, Xander, Neil SmithlineNov 28 '15 at 20:53

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

• What do you mean by "How do hacker find vulnerability?" New ones or existing ones? Do you have any specific areas in mind? Web apps, networks, systems? – sir_k Nov 28 '15 at 19:59
• Depends upon what kind of vulnerability is searched. For example finding vulnerabilities in an encryption-algorithm is rather a task for a mathematician, than simply reading the code. Some other vulnerabilities can easily be found by reading docs, like for e.g. attack-vectors that allow (nearly) invisible scans (SYN-scanning to name an example). This question is simply too broad to be answered – Paul Nov 28 '15 at 20:09
• It's advised to use tags wise as I do not think virus tag is suited to this post. – Shritam Bhowmick Nov 29 '15 at 12:21