RE: *Request* Finding Exploits 02-28-2016, 03:36 AM
#3
The word you're looking for here is vulnerabilities. You find vulnerabilities and create exploits. 2 of the 3 things Sans mentioned only apply to things that you have the source code for, which in my opinion, makes finding vulnerabilities MUCH easier. When black-box testing, if you take it seriously, you find anywhere where the said application/program allows for user-input. Using your findings you test all possible inputs that could trigger an error or vulnerability to show.
It's hard to put it into words, usually the more experience you have, the better you'll be at finding vulnerabilities. That's why nobody can just read an HF tutorial and become a master hacker 5 minutes later.
"Those competent enough to teach The Way know that it cannot be taught."
It's hard to put it into words, usually the more experience you have, the better you'll be at finding vulnerabilities. That's why nobody can just read an HF tutorial and become a master hacker 5 minutes later.
"Those competent enough to teach The Way know that it cannot be taught."

![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)