From exploitation CTFs to finding real vulns: Is blind CVE reproduction the best way to practice code auditing in the age of AI?

hey everyone, I'm a malware analyst with a dream to transition to a vulnerability research job, so in my spare time I've done a fair amount of binary exploitation CTFs (heap, stack, kernel modules) from places like: https://github.com/hoppersroppers/nightmare https://pwn.college/ https://pwnable.kr/play.php I felt confident enough so I went to a... Weiterlesen