nbk_2000

6 ms·

1. 61.▲
   by nbk_2000 6y ago

   Many years ago, you'd likely have been told to start by reading the Web Application Hackers Handbook (WAHH). But that has since been replaced by the online interactive labs, available free of charge by the fine folks of PortSwigger. h
2. 62.▲
   by nbk_2000 6y ago

   The following companies buy 0-days. Each has a slightly different business model: Zerodium - http://zerodium.com/ Azimuth Security - https://www.azimuthsecurity.com/ NSO Group - https://www.nsogr
3. 63.▲
   by nbk_2000 6y ago

   True, plus "opsec life sucks" so most of us don't do it.
4. 64.▲
   by nbk_2000 7y ago

   Couldn't the researcher have just sold his finding to Project Zero? If so, that seems like a superior alternative to immediate public disclosure.