Vulnerability Research

["M.D.Mufambisi" <mufambisi () gmail com>]

Hi People.

Can someone please enlighten me on how vulnerabilities are found. Say
for instance the netapi remote code execution vulnerability (MS08_067)
How is it discovered? Trial and error? Reverse engineering the netapi
dll? It would need a thorough understanding of the internal workings
of the dll wouldnt it? Please enlighten me.

Regards.

Munya

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class. 
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------