Homework
Three tasks to deepen your exploit-dev workflow — all defensive framing.
All homework stays in defensive validation mode: detection, patch verification, and disclosure. Never ship a weaponized exploit outside an authorized lab.
Task 1 — Detection Signature
Objective
Write a detection that would catch exploitation on the wire.
Instructions
- From the CVE and crash dump, identify the exact byte pattern that indicates an exploitation attempt.
- Write a Suricata or Snort rule that matches it.
- Write a brief rationale: what is the false-positive rate against benign traffic?
Deliverable
One rule file plus rationale.
Task 2 — Patch Verification Harness
Objective
Extend the --check mode PoC into a fleet scanner.
Instructions
- Wrap the Exercise 4 PoC so it reads a list of target hosts from a file.
- Run it in a safe "probe only" mode against each host and output a CSV: host, vulnerable Y/N, version detected.
- Add rate limiting and logging.
Deliverable
verify_fleet.py.
Task 3 — Disclosure Draft
Objective
Practice responsible disclosure writing.
Instructions
- Write a coordinated-disclosure email to the (fictional) vendor.
- Include: the finding, impact, reproduction steps, suggested fix, timeline, and your PGP contact.
- Tone should be professional, not triumphant.
Deliverable
One email draft in markdown.