So how do pentesters and cyber terrorists actually discover exploits?
Is there some backlog of it on the dark web or something?
So how do pentesters and cyber terrorists actually discover exploits?
Chase Hill
Other urls found in this thread:
news.ycombinator.com
sites.google.com
twitter.com
Adrian Gonzalez
Sometimes it's a
>huh, that was weird...what happens if I...
Logan Gonzalez
They either do intensive research on the infrastructure they intend to exploit, or leech off of someone else's research like a script kiddie.
Landon Rodriguez
Anything better than trial and error? Any tendencies, good books on the subject? Or do pentesters rely on a massive foundation of knowledge?
Ryder Rogers
Yes.
Jayden Walker
I'd imagine 99% of the time it's via sitemap.xml or robots.txt.
Matthew Hall
So, what you be sayin is, I gotta be smart for pentesting and not just hackermann my way through it with python scripts like in mr robot?
Owen Fisher
It's called programming you faggot.
Oliver Jenkins
Looking for mind blowing stupidity in patches for critical crypto code is an obvious start. Did you check out ?
Brody Powell
Why are some programmers so bad
Jose Jenkins
They use Metasploit.
Aaron Taylor
A good amount are from people in the field. They leave holes exposed, leave the company or tell a friend, then collect that sweet bounty
Chase Cruz
Automated trial and error. Fuzzing and grep -r 'strcpy'
Jose Hernandez
most vulnerabilities are found by mere accident. They just exploit or sell them.
Anthony Morgan
reverse engineering is pretty useful at times. go learn that.
Kayden Jackson
thats just a buzzword that can mean 100 different things though
Jacob Peterson
then learn the things that apply to what you want to hack.
Elijah Foster
Humans cannot write perfect code by nature. Developers are generally lazy, if they throw something together and it works and mr shekelstein is happy with it then they get their wagebucks. Then when it doesn't get tested rigorously enough or something is overlooked, an exploitable state can be found.
Ethan Hernandez
Statistics mean half are less than average intelligent. Trouble really arises when consider themselves smart and ascend the great heights of Dunning-Kruger.
Xavier Wright
>Statistics mean half are less than average intelligent
Colton Bailey
Funny how the answer can be found on the website in your pic, OP.
news.ycombinator.com
Gabriel Parker
Intensive research/reverse engineering/luck
Most of the time they sell these, for example a really bad Windows exploit can go for hundreds of thousands of dollars
James Williams
google fuzz testing
Camden Myers
>inside job
Hate to say it, but you're probably right.
Alexander Davis
>the dark web
WHOOAAAAA
Samuel Mitchell
yes Cathy