Documenting the Problem
Whether you have been able to produce a working exploit or not, it is always useful to document the effort that you put in while researching a software problem. The disclosure process has already been discussed in previous chapters, but here we will talk a little about the types of technical information that you may want to include in correspondence with a software vendor.
Background Information
It is always important to provide as much background information as possible when reporting a problem. Critical facts to discuss include
Operating system and patch level in use.
Build version of the software in question.
Was the program built from source or is it a binary distribution?
If built from source, what compiler was used? ...
Get Gray Hat Hacking, Second Edition, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
