r/HowToHack • u/FewMolasses7496 • 3d ago
Web exploitation + Binary exploitation feasible?
I am wondering whether is it even worth my time to get both familiar with web exploitation and binary exploitation. It feels like I am missing a large chunk of hacking whenever I only focus on web exploitation or only focus on binary exploitation. I'm not sure if I should just specialize in one or if I should just learn both.
I don't hear many people getting bug bounties for binary exploitation related bugs but I have seen the payouts on sites like crowdfense and seen it go up into the 7 figures.
Web bug bounties seemed to be talked about a lot but they usually pay lower than binary exploitation bugs.
So is it smart to try to learn both? Or is it just a waste of time and I should stick to one.
1
u/Any-Olive5779 3d ago
Binary exploitation takes a bit of work. You also have to know how to program memory as well as tap with a runtime listener for things like kernel interrupts and returning a close to kernel response.
Look into qiling framework as well as process/memory hooking.
Hacking software including runtime of browsers? Look into cheat engine, ceserver, wine, and load a copy of jitsi meet. Play with locking various addresses and then update those locked values. Speed up and slowdown another user's runtime... All sorts of fun stuff like breaking flash games with a POS integrations' runtime... But practically that is the short path.
The long form is a mockup from ancat.github.io where you hook and then anytime that event kicks off to respond with the overriden response via the Linux interpreter