4 ms·
Beginners Guide to 0day/CVE AppSec Research
- deleted 5y ago[deleted]
- rosndo 5y agoIt’s so weird to see “CVE” used like this. “AppSec research” or just résumé padding?
- matthews2 5y agoThe gamification of CVEs has been a real negative for people that actually have to deal with them.
- randomhodler84 5y agoWhether the CVE is found by someone who reports it, or someone that does not makes no difference to the vulnerability of your systems. Better it be in the light, where it can be fixed, than in the darkness.
- Terry_Roll 5y agoI think having a system which is not insecure by design is better, it doesnt matter then if some poor code makes it into a system, it will be contained be default before it can do any damage.
- rosndo 5y agoCVEs are not found, they are applied for. The resume padding sport has resulted in a flood of nonsensical applications.
- randomhodler84 5y agoThat’s true, CVE is just the classification. I should have used “vulnerability” twice. But that people are finding them and padding resumes doesn’t actually make you less secure, the opposite. At least we can know.
- Fnoord 5y agoThe abbrev vuln = clear & understood. Vuln is 1 > letter than CVE. Both require you to know the meaning, but if required vulnerability can be written out. One could do that once, or explain it once. For example in header or first sentence.
- greggsy 5y agoFor some, it’s not a game, but an opportunity or directive. Would you prefer to to patch or do IR?
- mikeodds 5y agoTrying to get intentionally slightly broken exploits running was the early 00’s version of CodeAcademy
- Fnoord 5y agoYeah in the time of Bugtraq (long before Metasploit) you'd have to fix intentionally slightly broken exploits (e.g. C code or Perl) which was done to avoid scriptkiddies. Nowadays there's an entire OS full with an arsenal of weapons.
- saagarjha 5y agoThis is less a guide and more a walkthrough of finding a simple exploit in a vulnerable application, which isn't "bad" but it might be worth setting expectations before reading.
- spydum 5y agoMakes no attempt to contact the software maintainer, just weaponize the vuln for street cred, and spam the vuln everywhere for resume padding. I'm fine with vulnerability research, but come on, at least give the creators an opportunity to fix their issues.
- aaaaaaaaata 5y agoRockstar