one idea is to use a static analysis tool and look for memory exploits. for practice you could take say an old version of any popular app (say bittorent v0.1 )

one idea is to use a static analysis tool and look for memory exploits. for practice you could take say an old version of any popular app (say bittorent v0.1 ) and run it through the tool. the older versions would have example bugs and memory exploits so you can get familiar with the tool. maybe that would also give you some ideas of places to look for bugs (since first versions tend to be more buggy). the most fruitful has been for a long time sql injection (imo). while thats largely been fixed by parametized queries, theres probably a ton of software that was never upgraded.