8 ms·
how do you "look" for POC's?
by tty7 8y ago
how do you "look" for POC's?
- PenguinCoder 8y agoVarious websites, shady forums, tor sites, and 'hacker spaces'. Sometimes that includes white/gray hat haunts for exploit code. Pastebin like sites, github.com, etc. 'darkweb' and OSINT searches. If there is a know vuln, there is someone out there eager to be 'first' to writing exploit code and showing off.
- gtirloni 8y agoAny place where a concrete list of such resources can be found?
- wonthegame 8y agoGoogle.
- eatbitseveryday 8y agoIt's as if these places are worth something to know about and to keep to oneself. That, or "searching for exploits" is just a phrase to sound important. How demeaning to reply with just "Google".
- IloveHN84 8y agoGoogle doesn't list dark web or shady forums
- subcosmos 8y agosounds like a 20% time project! Or a GSoC
- jdeca568 8y agoHere is one: https://www.exploit-db.com/ https://www.exploit-db.com/. But this CVE doesn't appear to be referenced at the moment.