3 ms·
> When you think you have just found a 0-day in your systems and want to check if you are right or not. That's like shooting yourself in the foot to see if the
by Splines 15y ago
> When you think you have just found a 0-day in your systems and want to check if you are right or not.
That's like shooting yourself in the foot to see if the bullet hole is the same.
- ktizo 15y agoHuh? Same as what? We are talking about 0-day vulns. By definition if you think you have found a 0-day, you have little to compare it to. Exploiting a bug on your system to verify that it is a bug that can be exploited would seem to be one of the very first things to do after verifying your backups, if you think you have found a 0-day vuln. Otherwise, how would you know that it is what you think it is? There is no general procedure you can run on code to check this for you other than actually checking it and seeing what it does.
- lawn 15y agoMore like shooting a dummy in the foot? How is this even a valid comparison?