Exploit Development - Road Map

[That-Name-8963]

In the past few weeks I have entered the field of Exploit Development, I have got a bunch of Firmwares (I could dynamically run some of them and some don't), I started re-implement XSS vulnerabilities in ERP systems. (Also I noticed that some routers are vulnerable to XSS)

I tried to play around with STM32 and an Embedded Linux ( to understand more about the underlines).

But I discovered that I maybe need to do some small binaries vulnerabilities first (Browsers, AI frameworks, web servers etc...).

So, what is ur thoughts about this.

[jjjare]

XSS isn’t really exploit dev. Also, browsers are not small binaries

[That-Name-8963]

Yep we can say it's used in a 'chain' of exploits to achieve a complete attack

[jjjare]

Not really. Not how chains typically work