Given a unique url to a server binary, clock started when I hit it the first time, assignment was to deliver a simple PoC exploit in 2 hours. IIRC (this was ab

Given a unique url to a server binary, clock started when I hit it the first time, assignment was to deliver a simple PoC exploit in 2 hours. IIRC (this was about 13 years ago so a little fuzzy) it was a simple SMTP server and the vulnerability was a stack overflow that could be triggered in the RCTP request so you needed to send some valid input first and get a few steps into the state machine. For that kind of work, it doesn’t get much more real or more fun.