Nullcon Berlin 2023 | Why I Write My Own Security Tooling & Why You Should Too! by James Forshaw

Abstract:
---------------
It's easy to be impatient when doing security research, you want bugs now! But where to start? Is there source code to review? Do you have binaries to disassemble? My opinion, start by writing some domain specific tooling. There are many advantages to writing your own tooling for a research project. It'll help you better understand the technologies you're investigating which in turn helps you find more interesting vulnerabilities.

In this presentation I'll discuss the many benefits of writing your own tooling even if it delays that first, amazing find. I'll show examples of tools I've written to aid in my Windows research career and take a peek at some bugs I wouldn't have found without them. Finally I'll make the case for why writing your own tools will make you a better researcher.

#securitytools #opensource #Infosec #NullconBerlin
------------------------------------------------------------------------------------------------------
Follow nullcon on Facebook:   / nullcon  
Twitter:   / nullcon  
LinkedIn:   / nullcon  
Website: https://nullcon.net