https://grit8086.github.io/tags/vulnerability-research/Recent content in Vulnerability-Research on grit8086Hugoen-usFri, 05 Dec 2025 00:00:00 +0800https://grit8086.github.io/posts/cve-2025-10767/Fri, 05 Dec 2025 00:00:00 +0800https://grit8086.github.io/posts/cve-2025-10767/<h1 id="whats-up">What&rsquo;s up?</h1> <p>Lately I’ve been digging into vulnerability research - reading writeups and watching videos about adversarial toolkits that turned out to be vulnerable themselves. Shout-out to my friend Chebuya for the insights on this topic.</p> <h1 id="what-made-me-delve-into-this-topic">What made me delve into this topic?</h1> <p>Most vulnerability researchers, hackers, and threat actors look for bugs in enterprise software, apps, and the like. But what if we look for vulnerabilities in the tools researchers use? IDA, BloodHound, Havoc, Sliver, Cobalt Strike - it’s ironic, but these tools can also contain exploitable mistakes.</p>