At one point I wasted almost a year digging into kernel BSD subsystems in now defunct platforms, I found only a few information leaks. This kind of work sometimes yields very little results despite hard effort, then I found over 10 LPE’s in a single afternoon on AIX.
-
This Tweet is unavailable.
-
I have a good tip for you tho, instead of seeing “I found little bugs”, write tools that help you find the bug classes and performing audits alongside the digging. This way you can always have some fruit for your labor and it may come in handy in the future.
yarh, I second that- when tooling you always get something in return of time investment. can actually make big difference mentally- and that is a big part of it. but also, time invested in tooling can pay out infinitive times again. thats why i did my exploit kit
