I've noticed that lots of CVE at www.cvedetails.com do not have publicly available exploits. But they have high scores (ex: score higher than 9). With such a high score, I'd thought exploits would be readily available but it's not the case (not even present in exploitdb).

So how would a hacker, from the description at www.cvedetails.com write exploit code? Do hackers do that?

  • 2
    This question is incredibly broad. – user173641 Feb 6 '20 at 9:13
  • 1
    How do you think the metasploit exploits are created? – tripleee Feb 6 '20 at 9:19
  • 1
    @botanga that's a little like asking "how do you program?" IT's that broad. Your example makes tons of assumptions about the kind of programming involved. All your steps are for a very specific type of programming. – schroeder Feb 6 '20 at 9:23
  • 2
    @botanga Please don't consider refusal to answer a bad question to be a personal attack. We're under no obligation to answer anything. The community sacrifices their spare time, that they can very much use to do other things, to try to create a knowledgebase of specific questions and answers of InfoSec topics. – MechMK1 Feb 6 '20 at 9:37
  • 2
    That was not sarcasm. Your question now is basically "how do you exploit various vulnerability classes?" And this is where we direct you to beginner learning resources like a book – schroeder Feb 6 '20 at 9:37

You wanted a broad answer:

  1. Read about the bug
  2. Attempt to understand the bug
  3. Use a fuzzer to find the crash
  4. Attempt to exploit crash
  5. Profit.

Fuzzing is only one method. Please seek additional resources to learn about more methods.

  • 1
    @MechMK1 if you start an answer before its closed, it will go through – schroeder Feb 6 '20 at 9:36
  • 1
    Ah, but fuzzing is only one approach :) – schroeder Feb 6 '20 at 9:36
  • 1
    @schroeder Then I deleted my answer for nothing. Because there is this big orange bar telling me "This question has been closed - no more answers will be accepted." That sounds quite the opposite. – MechMK1 Feb 6 '20 at 9:36
  • 3
    @schroeder The more generic answer would be "Analyze the Program -> Find the Bug -> Exploit the Bug -> Profit." – MechMK1 Feb 6 '20 at 9:37
  • 1
    @schroeder Good point; let me just pull out my bible of exploit development I'll "quickly" write it up word for word here :D – user173641 Feb 6 '20 at 9:37

Not the answer you're looking for? Browse other questions tagged or ask your own question.