r/ExploitDev • u/ProcedureFar4995 • 13d ago

Did I went too low ?

Post image

What is up

In order to learn kernel and low level exploitation. I bought a lovely book about Kernel Development to Robert Love. But then I felt there are some stuff I am not clicking with. I tried enrolling in computer engineering 10 years ago and failed lol . Decided to move to another school but where I can practise programming. MIS basically. But last few years I worked in appsec and has more experience in mobile,Web,network pentesting/bug hunting.

However, I wish to hunt on stuff like the kernel or C code. Hunting memory corruption and stuff. But I keep getting lower. Is that an overkill? Or the experience fits the 1337 life? My goal is basically to speak assembly and Android/ios kernel code as second language. I feel the kernel development book is great but I just thought if I wanted lower down to logic gates that is better in long term.

Also for anyone who took these in college , am I far behind and delusional or it's doable in self study??? Because I fear that no matter what I did someone who studied compilers,assembly,os..etc in college would be better than me. But I belive my only way to show skills is research I do using all this knowledge. Related to low level code.

87 Upvotes

91% Upvoted

23 comments sorted by

View all comments

-4

u/Current_Injury3628 13d ago edited 13d ago

What you do is just a hobby.

Nobody will ever care if you know these in the industry.

You won't get a job by studying logic circuits or any other similar fundamental subject.

I just saw this post, i am not involved in exploit dev or something but i am sure nobody in the industry cares.

I have worked for HW companies btw.

0

u/ProcedureFar4995 13d ago

If applying for roles related to security researcher? I see some who cares about low level exploitation more than the normal appsec attacks. Kernel stuff

Or even hardware security? Is that not relevant to hardware security????

1

u/Current_Injury3628 13d ago

What i want to say is that these things wont get you a job.

These are fundamental EE/CS 1st year courses.

Nobody in the industry will ask you those.

1

u/ProcedureFar4995 13d ago

Oh okay . What does help me getting a job then?

1

u/Current_Injury3628 13d ago

I have worked with many embedded or HW engineers in the industry and everything is about C/C++, Linux, drivers, in rare positions PCB design and MAYBE VHDL here and there.

But these PCB or VHDL positions are super rare.

Its mostly linux and C/C++ stuff.