Find security holes before the bad guys do.; Break into the world of vulnerability research--or expand your cybersecurity specialities--and become a zero-day hunter. Vulnerability research is one of the most effective ways to prevent zero-day attacks, making it a highly sought-after skills set in the cybersecurity realm. This book is designed to help newcomers navigate the intersection of disciplines needed to find unknown security flaws before they can be exploited. In it, author Eugene “Spaceraccoon” Lim--an award-winning white-hat hacker--presents a comprehensive roadmap of starter strategies in vulnerability research that will enable you to begin hunting zero days right away. Delving into the intricacies of code review, reverse-engineering, fuzzing, and more, Lim guides you step-by-step on how to discover real-world vulnerabilities in the wild. Even experienced researchers can benefit from Lim’s insights, expanding their toolkits and discovering new zero days along the way. Learn how to: < From Day Zero to Zero Day< is your gateway to mastering vulnerability research--an increasingly critical domain in safeguarding our digital landscape.

Autorentext

Eugene Lim (aka “Spaceraccoon”) is a security researcher and white-hat hacker who has reported hundreds of vulnerabilities across enterprise software, hardware, and cloud services. In 2021, he was one of five researchers selected from a pool of over one million for HackerOne’s H1 Elite Hall of Fame. His research has been featured at Black Hat and DEF CON and in WIRED and The Register.

Klappentext

Find vulnerabilities before anyone else does.

Zero days aren’t magic—they’re missed opportunities. From Day Zero to Zero Day teaches you how to find them before anyone else does.

In this hands-on guide, award-winning white-hat hacker Eugene “Spaceraccoon” Lim breaks down the real-world process of vulnerability discovery. You’ll retrace the steps behind past CVEs, analyze open source and embedded targets, and build a repeatable workflow for uncovering critical flaws in code.

Whether you’re new to vulnerability research or sharpening an existing skill set, this book will show you how to think—and work—like a bug hunter.

You’ll learn how to:

• Identify promising targets across codebases, protocols, and file formats.

• Trace code paths with taint analysis and map attack surfaces with precision.

• Reverse engineer binaries using Ghidra, Frida, and angr.

• Apply coverage-guided fuzzing, symbolic execution, and variant analysis.

• Build and validate proof-of-concept exploits to demonstrate real-world impact.

  More than a toolkit, this is a window into how top vulnerability researchers approach the work. You’ll gain not just techniques but also the mindset to go deeper, ask better questions, and find what others miss.

  If you’re ready to stop reading write-ups and start writing them, From Day Zero to Zero Day is your guide.

  Inhalt
  Foreword by Jacob Soo
  Foreword by Shubham Shah, aka shubs
  Introduction
  Chapter 0: Day Zero
  Chapter 1: Taint Analysis
  Chapter 2: Mapping Code to Attack Surface
  Chapter 3: Automated Variant Analysis
  Chapter 4: Binary Taxonomy
  Chapter 5: Source and Sink Discovery
  Chapter 6: Hybrid Binary Analysis
  Chapter 7: Quick and Dirty Fuzzing
  Chapter 8: Coverage-Guided Fuzzing
  Chapter 9: Fuzzing Everything
  Chapter 10: Beyond Day Zero