From Day Zero to Zero Day

BRIEF CONTENTS

1. Foreword by Jacob Soo

2. Foreword by Shubham Shah, aka “shubs”

3. Introduction

4. Chapter 0: Day Zero

   Defining vulnerabilities, disciplines of vulnerability research, and target selection

5. PART I: CODE REVIEW

6. Chapter 1: Taint Analysis

   Sources and sinks, taint tracking, and exploit development

7. Chapter 2: Mapping Code to Attack Surface

   Network and local attack surfaces, technical standards documentation, and local privilege escalation

8. Chapter 3: Automated Variant Analysis

   Abstract syntax trees, static code analysis with CodeQL and Semgrep, and variant analysis

9. PART II: REVERSE ENGINEERING

10. Chapter 4: Binary Taxonomy

    Electron framework, PyInstaller, intermediate representations, Java bytecode, static and dynamic linking, and packed binaries ...