New CVE? Don’t Fucking Test It on Production Servers
Running public exploit code against production is not “testing.” It is how you turn vulnerability validation into an incident.
CATEGORY
Notes
Short experiment logs, quick observations, and technical scratchpad entries.
Seed Corpus Notes for Deserialization Fuzzing
Compact experiment log on building a minimal corpus for binary deserialization fuzzing in internal message handlers.