7 ms·
I don't think there is a general consensus in the security community that finding bugs is easier than writing exploits.
by EE84M3i 5mo ago
I don't think there is a general consensus in the security community that finding bugs is easier than writing exploits.
- solenoid0937 5mo agoIt definitely is. You can use all sorts of vuln scanners to find vulns. Most codebases have vulns, and most vulns aren't even reachable. The hard part is chaining them together in a fire-and-forget exploit that gets you what you want from the target.
- Guvante 5mo agoIsn't breaking the sandbox the hard part? RCE is effectively "can run code" which is just JavaScript if you ignore the sandbox.