Research

Exploit Development

We turn a reported flaw into a working proof of its impact, so fixes can be prioritised on evidence.

The work

What this actually involves

The target determines which methods matter.

  • Reproduction

    Turn a crash or report into a reliable test case.

  • Root cause

    Identify the underlying flaw, beyond the crash.

  • Reachability

    Determine who can reach the flaw and under what conditions.

  • Primitives

    Establish what the bug lets an attacker read, write, or control.

  • Proof of concept

    Demonstrate the flaw with the smallest useful proof.

  • Mitigations

    Check which platform defences still hold.

Next

How it runs, and how to commission it

Every project follows the same process and disclosure terms.

How research runsCommission this work

Ask about exploit development

Tell us what the target is and what you need to know about it.

Start a conversation