A bug hunter's diary
by Tobias Klein · first published 2011
8mentions
5recommended by
6HN commenters
2014–2021first – last mentioned
83% recommend17% neutral
Why HN recommends it
Practical, real-world walkthroughs of vulnerabilities the author found in actual software, covering how bugs were located, reported, and what followed; useful for those learning security bug hunting.
Summarised by Claude from recommending comments
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
…"Fuzzing: Brute Force Vulnerability Discovery", by Michael Sutton http://amazon.decenturl.com/fuzzing Best looking at how hackers are getting in, as-well as programming defensively. Tobias Klein's "A Bug Hunter's Diary" is a good read too: http://amazon.decenturl.com/bug-hunter
on “How do you program securely?” ↗You might enjoy A Bug Hunter's Diary by Tobias Klein. It's a detailed series of technical essays about vulnerabilities the author discovered in real software, how he went about finding and reporting them, and what happened. The appendices…
on “Meet ‘Project Zero,’ Google’s Secret Team of Bug-Hunting Hackers” ↗Thanks for sharing this! I could wish for some tool use (gdb) screenshots, though really the inspiration to learn is valuable enough. A next read in this vein might be Bug Hunter's Diary by Tobias Klein: https://www.nostarch.com/bughunter
on “My Favorite Debug Ever” ↗I found Tobias Klein's _A Bug Hunter's Diary_ to be quite readable and enlightening even if I couldn't follow all of the code. https://nostarch.com/bughunter
on “7-Zip: Multiple Memory Corruptions via RAR and ZIP” ↗I could really recommend you the book A Bug Hunter's Diary by Tobias Klein which is a practical walk-trough in finding these kinds of security bugs. https://nostarch.com/bughunter
on “NSO Group iMessage Zero-Click Exploit Captured in the Wild” ↗…http://opensecuritytraining.info/Exploits2.html - You'll find some overlap with Corelan's tutorial series and this course so you might want to take this course and reference the tutorials as you go. 5. A Bug Hunter's Diary - Excellent book that covers some similar topics as the previous resources but spends a bit more time on actually finding vulnerabilities not just exploiting them and goes into more mitigations than…
on “Ask HN: What's the prerequisite to become an exploit developer?” ↗And in addition, The Bug Hunter's Diary: https://nostarch.com/bughunter
on “Ask HN: How do security researchers know where to look for vulnerabilites?” ↗…Command Line has basically taught me everything I know about using bash. I've never read The Smart Girl's Guide to Privacy, but I've heard so many good things about it. It's on my to-read list. The Bug Hunter's Diary is really interesting, although someone reading it now might feel like it's a bit outdated (it got released in 2011 if I remember correctly). I didn't particularly enjoy reading The Art of Exploitation.…
on “Humble Book Bundle: Hacking Presented by No Starch Press” ↗