AI, Data Science & Cloud Certificates from Google, IBM & Meta
Free courses from frontend to fullstack and AI
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk introduces vulnerability research through the discovery and exploitation of zero-day code execution bugs in office applications. It demonstrates fuzzing, source code review, and reverse-engineering, and assumes minimal background knowledge.
Syllabus
Introduction
Who am I
What is Vulnerability Research
What is VR
Skills required
Getting started in VR
DBF Documentation
Fuzzing Template
Triage Mechanism
Zero One Zero Editor
Exploit Example
Dumb Fuzzing
Apache Open Office
Inline Validation
Bypassing DEP and ASR
Rob Chains
Cve202133035
Disclosure
Patch
Summary
Announcement
Govtech Vulnerability Rewards
Outro
Taught by
HackerOne