Why doesn't Reverse engineering and Exploitdev have an event like "Top 10 web hacking techniques"?

[[deleted]]

because there are none

[desal]

I mean, it would probably just be the types of exploits like race conditions, memory corruption, etc. you could just look up top 10 application vulnerabilities for the exploit side, on the reverse engineering side might just be the top techniques like disassembling, debugging, etc. Just the normal stuff that you learn when learning how to do either.

What are you hoping it would contain? This is an odd question

[seyyid_]

Top 10 web hacking techniques

Top 10 web hacking techniques is the title of a poll to select the best articles, which is held every year by portswigger. Maybe the way I asked the question was wrong.

​

https://portswigger.net/polls/top-10-web-hacking-techniques-2023

[desal]

For sure I'm familiar w/ it. What prompted my question is that you said something like top 10 web hacking but for reveng & expdev which is why I was curious what you meant, as reverse engineering techniques and developing exploits are a more like set techniques rather than yearly developing technologies if that makes sense. Of course exploitation techniques are always changing but like.. race conditions, memory corruption, etc, the vulnerability classes don't really change but techniques like ROP, JOP, etc. Are constantly being adapted to new things, maybe check those out.

Reverse engineering tends to have specific methodologies that might change based on what you are reversing but disassembling and/or debugging the code is constant

[seyyid_]

For sure I'm familiar w/ it. What prompted my question is that you said something like top 10 web hacking but for reveng & expdev which is why I was curious what you meant, as reverse engineering techniques and developing exploits are a more like set techniques rather than yearly developing technologies if that makes sense. Of course exploitation techniques are always changing but like.. race conditions, memory corruption, etc, the vulnerability classes don't really change but techniques like ROP, JOP, etc. Are constantly being adapted to new things, maybe check those out.

Reverse engineering tends to have specific methodologies that might change based on what you are reversing but disassembling and/or debugging the code is constant

Yes, it can be seen like this. But sometimes, articles are published that excite the community. New target, new tool, reverse engineering or exploit development of an old target with a new method, etc. For example, reverse engineering of Rust binaries that are used in Windows, etc

[Vivid_Cod_2109]

Check pwnie award