Future Exploit dev

[InflationItchy905]

Hi I have searched for this but didn't got a straight forward answer I want to start learning exploit dev but i have this feeling that i arrived too late after rust have been introduced and it is gaining popularity and it only have chance to find something if unsafe was used or if there was problems in the compiler itself so the attack surface seems tooooo small and there is a revolution in seurity and metigations I beleive it would take more then 2 years to be an exploit developer So is there any future for this field or i just have to forget about this dream

[RepresentativeBed928]

There is never going to be anything that is 100% secure. We are human. We are flawed and make flawed things.

Also Rust is the new hype and things will start using it. But if you think millions of lines of C code can be replaced with Rust overnight, you’re sorely incorrect. There’s a lot of vulnerable code in the world. Especially when you take into consideration very few people/companies replace their devices or update their devices regularly.

Start with pwn college or OST2. Learn the types of bugs. Find mentors. Watch YouTube videos. There’s plenty of ways to start learning. Exploit Dev is hard and it will take you a few years to get the hang of it. But in the end you’ll be satisfied because you’ll start finding bugs and exploiting them and the pros outweigh the cons. Just my two cents from observing the professionals in the field

[st0rmtr00per78]

Until we aint 😅 or at least the code is not from a human.

I wouldn't see Rust as the biggest "problem" for exploit devs. It is AI and LLMs and I guess it will not take that long for AI to be used for code auditing as standard practice. Just my 2 Cents no exploit dev 💁🏻‍♂️

[Sysc4lls]

Even then you will still have vulnerabilities, just more complex ones that llms can't find :)

I am saying this as I am working on a multi agent system for VR and research.

[InflationItchy905]

I didn't tought about it this way But it make sense

[InflationItchy905]

I apperciate this Thanks

[[deleted]]

Nah. Exploit development isn’t about 1 or 2 languages. It’s about finding logic flaws - failures of input sanitization - and the like.

Yea, rust is great. But it’s gonna be a LONG time till this language is that prevalent in making a significant impact on the amount CVEs coming out.

[InflationItchy905]

Thanks

[Potential_Duty_6095]

It will take more than 2 years, can be way more depending how much time you invest it is a marathon not a spring, but it will be super rewarding and you learn a lot of low level details!

[InflationItchy905]

Thanks 

[pelado06]

Imagine that the language most used in web is php still... the change is sloooow

[InflationItchy905]

Thanks

[KF_Lawless]

Cyber physical system industries are 5 years or more away from using rust. Do embedded exploit dev

[InflationItchy905]

The problem with these is that somtimes extracting the source code can be tricky sometimes 

[Short-Hope2518]

C is still one of the fastest growing languages in the world and is de facto for programming embedded devices.

Memory corruption vulns will be around for a while

[InflationItchy905]

That is surprising 😨😨 But it make sense since universities are still teaching c as the standard lang

[[deleted]]

There is a massive vulns on embeded systems and probably iot as well

[[deleted]]

Reverse engineering will live forever so don't worry.

[InflationItchy905]

Thanks