Topic created on: October 15, 2007 11:00 CDT by rbw .

I know that follow a cookbook isnt a good idea to find vulnerabilities in code (binary), how the basic steps one can follow in vuln research ? Should one look for danger functions statically and bugs on heap dynamic ? Fuzz or not fuzz in the beginning ? Reverse code blocks and search on it ? There`s much more questions but I would like to know/share it to speed up my vuln research. Thanks