threatactor.club

@joern @thorkson sometimes you only have to spend a decade or two to develop a good guts feeling to find vulns. :) Cool finding and nice writeup!

@ll1t
@joern I am still waiting for the "guts feeling" ISO norm or "vuln research with guts - for dummies" ;-)

@ll1t @thorkson well I kinda did a training on that a while back

https://code-audit-training.gitlab.io/

@thorkson @joern still have to see the book, but pretty confident the norms must be out there. Should be ISO 31337 for vuln research via code auditing and ISO 73313 for vuln research using reverse engineering, respectively. ;P

@joern nice finds!