[{"data":1,"prerenderedAt":568},["ShallowReactive",2],{"announcement":3,"i-tabler:sun":11,"i-tabler:moon":16,"i-tabler:menu-2":18,"i-tabler:x":20,"i-simple-icons:youtube":22,"i-simple-icons:github":24,"i-simple-icons:x":26,"i-simple-icons:linkedin":28,"i-tabler:arrow-up-right":31,"post-get-your-first-zero-day-right-now":33,"post-nav-get-your-first-zero-day-right-now":545,"video-get-your-first-zero-day-right-now":557,"i-tabler:copy":566},{"startsAt":4,"endsAt":5,"scramble":6,"cta":7,"message":10},"2026-10-13","2026-11-30","Cache Poisoning:",{"href":8,"label":9},"\u002Fcache-poisoning-the-cache-you-cant-purge","Read it","The cache you can't purge.",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":15},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":23},"\u003Cpath fill=\"currentColor\" d=\"M23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":25},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":27},"\u003Cpath fill=\"currentColor\" d=\"M14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":29,"hidden":30},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M17 7L7 17M8 7h9v9\"\u002F>",{"id":34,"title":35,"body":36,"categories":530,"coverImage":534,"date":535,"description":536,"draft":14,"extension":537,"meta":538,"navigation":30,"noindex":14,"path":539,"readingTime":540,"seo":541,"slug":542,"stem":542,"updatedAt":543,"youtubeId":42,"__hash__":544},"blog\u002Fget-your-first-zero-day-right-now.md","🚀 Get Your First Zero-Day RIGHT NOW!",{"type":37,"value":38,"toc":508},"minimark",[39,43,48,52,56,59,64,99,114,118,127,135,253,260,337,341,362,366,413,417,424,428,476,480,483,497,501,504],[40,41],"post-media",{"video":42},"FdGyjV4kNwo",[44,45,47],"h2",{"id":46},"introduction","Introduction:",[49,50,51],"p",{},"Welcome to the world of zero-day vulnerabilities! Have you ever wondered about discovering your first zero-day exploit? In this article, we will cover everything you need to get started with zero-day exploits in both binary software and web applications. Whether you're a cybersecurity enthusiast or a seasoned professional, this guide will provide you with the knowledge and tools necessary to embark on your journey to uncovering zero-day vulnerabilities. So, grab a coffee and let's dive in!",[44,53,55],{"id":54},"setting-up-your-environment","Setting Up Your Environment:",[49,57,58],{},"Before we begin, it's crucial to set up a safe and controlled testing environment. Using virtual machines (VMs) can help create an isolated environment where you can safely test for vulnerabilities without affecting real-world systems. VMware and VirtualBox are excellent tools for setting up your virtual lab.",[60,61,63],"h3",{"id":62},"installing-vmware","Installing VMware",[65,66,67,87,93],"ol",{},[68,69,70,74,75,86],"li",{},[71,72,73],"strong",{},"Download VMware Workstation Player"," from the ",[76,77,83],"a",{"href":78,"rel":79,"target":82},"https:\u002F\u002Fwww.vmware.com\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],"noopener","noreferrer","_blank",[71,84,85],{},"official VMware website",".",[68,88,89,92],{},[71,90,91],{},"Install VMware"," by following the installation wizard instructions.",[68,94,95,98],{},[71,96,97],{},"Create a new virtual machine",":",[100,101,102,105,108,111],"ul",{},[68,103,104],{},"Open VMware Workstation Player.",[68,106,107],{},"Select “Create a New Virtual Machine.”",[68,109,110],{},"Choose the installer disk image (ISO) for the OS you want to install.",[68,112,113],{},"Follow the prompts to complete the VM setup.",[44,115,117],{"id":116},"zero-day-exploits-in-binary-software","Zero-Day Exploits in Binary Software:",[49,119,120,121,126],{},"Binary software vulnerabilities can be challenging to detect but are incredibly impactful. To find zero-day vulnerabilities in binary software, we use specialized tools called fuzzers. Fuzzers work by bombarding an application with random inputs to find crashes and unexpected behaviors. Today, we'll be using ",[76,122,125],{"href":123,"rel":124,"target":82},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002FAFL?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],"AFL (American Fuzzy Lop)",", one of the most powerful fuzzing tools available.",[60,128,130,131,98],{"id":129},"installing-afl","Installing ",[76,132,134],{"href":123,"rel":133,"target":82},[80,81],"AFL",[100,136,137,172,198],{},[68,138,139,98,142],{},[71,140,141],{},"Update your package lists",[100,143,144],{},[68,145,146],{},[147,148,153],"pre",{"code":149,"language":150,"meta":151,"className":152,"style":151},"sudo apt-get update\n","bash","","shiki shiki-themes vitesse-dark vitesse-light",[154,155,156],"code",{},[157,158,161,165,169],"span",{"class":159,"line":160},"line",1,[157,162,164],{"class":163},"swzfi","sudo",[157,166,168],{"class":167},"sRRDT"," apt-get",[157,170,171],{"class":167}," update\n",[68,173,174,98,177],{},[71,175,176],{},"Install AFL",[100,178,179],{},[68,180,181],{},[147,182,184],{"code":183,"language":150,"meta":151,"className":152,"style":151},"sudo apt-get install afl\n",[154,185,186],{},[157,187,188,190,192,195],{"class":159,"line":160},[157,189,164],{"class":163},[157,191,168],{"class":167},[157,193,194],{"class":167}," install",[157,196,197],{"class":167}," afl\n",[68,199,200,98,203],{},[71,201,202],{},"Set up AFL",[100,204,205,211],{},[68,206,207,210],{},[71,208,209],{},"Download the source code"," of the target application you want to fuzz.",[68,212,213,216,217],{},[71,214,215],{},"Compile the target application"," with AFL instrumentation:",[100,218,219],{},[68,220,221],{},[147,222,224],{"code":223,"language":150,"meta":151,"className":152,"style":151},"export CC=afl-gcc .\u002Fconfigure make\n",[154,225,226],{},[157,227,228,232,236,240,243,247,250],{"class":159,"line":160},[157,229,231],{"class":230},"sfIIG","export",[157,233,235],{"class":234},"snInM"," CC",[157,237,239],{"class":238},"somML","=",[157,241,242],{"class":234},"afl-gcc",[157,244,246],{"class":245},"sG2Fq"," .\u002F",[157,248,249],{"class":234},"configure",[157,251,252],{"class":234}," make\n",[60,254,256,257,98],{"id":255},"using-afl","Using ",[76,258,134],{"href":123,"rel":259,"target":82},[80,81],[100,261,262,294,331],{},[68,263,264,267,268],{},[71,265,266],{},"Prepare the input directory"," with sample inputs for AFL:",[100,269,270],{},[68,271,272],{},[147,273,275],{"code":274,"language":150,"meta":151,"className":152,"style":151},"mkdir input_dir cp sample_input_file input_dir\u002F\n",[154,276,277],{},[157,278,279,282,285,288,291],{"class":159,"line":160},[157,280,281],{"class":163},"mkdir",[157,283,284],{"class":167}," input_dir",[157,286,287],{"class":167}," cp",[157,289,290],{"class":167}," sample_input_file",[157,292,293],{"class":167}," input_dir\u002F\n",[68,295,296,98,299],{},[71,297,298],{},"Start fuzzing",[100,300,301],{},[68,302,303],{},[147,304,306],{"code":305,"language":150,"meta":151,"className":152,"style":151},"afl-fuzz -i input_dir -o output_dir -- .\u002Fyour_application\n",[154,307,308],{},[157,309,310,313,317,319,322,325,328],{"class":159,"line":160},[157,311,312],{"class":163},"afl-fuzz",[157,314,316],{"class":315},"se4ZP"," -i",[157,318,284],{"class":167},[157,320,321],{"class":315}," -o",[157,323,324],{"class":167}," output_dir",[157,326,327],{"class":315}," --",[157,329,330],{"class":167}," .\u002Fyour_application\n",[68,332,333,336],{},[71,334,335],{},"Monitor the results"," in the output directory for crashes and unexpected behaviors.",[44,338,340],{"id":339},"zero-day-exploits-in-web-applications","Zero-Day Exploits in Web Applications:",[49,342,343,344,349,350,355,356,361],{},"Web applications are frequent targets for attackers due to their widespread use and accessibility. Common vulnerabilities include ",[76,345,348],{"href":346,"rel":347,"target":82},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fautomate-advanced-xss-with-xsstrike-and-dalfox\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],"Cross-Site Scripting (XSS)",", ",[76,351,354],{"href":352,"rel":353,"target":82},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fautomating-advanced-sql-injection-with-ghauri\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],"SQL Injection",", Cross-Origin Resource Sharing (CORS), Insecure Direct Object References (IDOR), and ",[76,357,360],{"href":358,"rel":359,"target":82},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fcsrf-automate-vulnerability-testing\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],"Cross-Site Request Forgery (CSRF)",". Discovering these vulnerabilities often involves using powerful tools like Burp Suite, OWASP ZAP, and Acunetix.",[60,363,365],{"id":364},"tools-for-web-application-security-testing","Tools for Web Application Security Testing:",[100,367,368,391],{},[68,369,370,98,373],{},[71,371,372],{},"Burp Suite",[100,374,375,385,388],{},[68,376,377,378,86],{},"Download from the ",[76,379,382],{"href":380,"rel":381,"target":82},"https:\u002F\u002Fportswigger.net\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],[71,383,384],{},"official PortSwigger website",[68,386,387],{},"Install and set up Burp Suite.",[68,389,390],{},"Use the Scanner tool to automatically find potential vulnerabilities in your web application.",[68,392,393,98,396],{},[71,394,395],{},"OWASP ZAP",[100,397,398,407,410],{},[68,399,377,400,86],{},[76,401,404],{"href":402,"rel":403,"target":82},"https:\u002F\u002Fwww.zaproxy.org\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],[71,405,406],{},"OWASP ZAP website",[68,408,409],{},"Install OWASP ZAP and follow the setup instructions.",[68,411,412],{},"Use its automated scanners and manual testing tools to identify vulnerabilities.",[44,414,416],{"id":415},"analyzing-and-exploiting-vulnerabilities","Analyzing and Exploiting Vulnerabilities:",[49,418,419,420,423],{},"Once potential vulnerabilities are identified, it's crucial to analyze and exploit them responsibly. Interpreting results from fuzzers and web scanners involves understanding crash reports and security warnings. Creating proof-of-concept ",[71,421,422],{},"(PoC)"," exploits helps demonstrate the impact of the vulnerabilities.",[60,425,427],{"id":426},"example-of-analyzing-a-crash","Example of Analyzing a Crash",[100,429,430,454,470],{},[68,431,432,435,436],{},[71,433,434],{},"Identify a crash report"," from AFL:",[100,437,438],{},[68,439,440],{},[147,441,443],{"code":442,"language":150,"meta":151,"className":152,"style":151},"cd output_dir\u002Fcrashes\n",[154,444,445],{},[157,446,447,451],{"class":159,"line":160},[157,448,450],{"class":449},"s6_DI","cd",[157,452,453],{"class":167}," output_dir\u002Fcrashes\n",[68,455,456,459,460],{},[71,457,458],{},"Use a debugger"," like GDB to analyze the crash:",[100,461,462],{},[68,463,464],{},[147,465,468],{"code":466,"language":467,"meta":151},"gdb .\u002Fyour_application core\n","text",[154,469,466],{},[68,471,472,475],{},[71,473,474],{},"Develop a proof-of-concept exploit"," based on the crash analysis.",[44,477,479],{"id":478},"ethical-considerations-and-responsible-disclosure","Ethical Considerations and Responsible Disclosure:",[49,481,482],{},"Ethical hacking is about making the digital world safer. Always disclose vulnerabilities responsibly and use your skills for good. Responsible disclosure involves reporting vulnerabilities to the affected parties and giving them time to fix the issues before making any public announcements.",[100,484,485],{},[68,486,487,490],{},[71,488,489],{},"Check out:",[76,491,494],{"href":492,"rel":493,"target":82},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fmastering-the-ejpt-exam-tips-for-success\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[80,81],[71,495,496],{},"Mastering the eJPT Exam: Tips for Success",[44,498,500],{"id":499},"conclusion","Conclusion:",[49,502,503],{},"Congratulations! You've taken your first steps toward mastering zero-day exploits. Remember, with great power comes great responsibility. Continue to practice ethical hacking and responsible disclosure. If you enjoyed this article, don't forget to follow our blog for more cybersecurity content. If you have any questions, feel free to reach out to us. Until next time, stay curious and stay secure!",[505,506,507],"style",{},"html pre.shiki code .swzfi, html code.shiki .swzfi{--shiki-default:#80A665;--shiki-light:#59873A}html pre.shiki code .sRRDT, html code.shiki .sRRDT{--shiki-default:#C98A7D;--shiki-light:#B56959}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html pre.shiki code .sfIIG, html code.shiki .sfIIG{--shiki-default:#CB7676;--shiki-light:#AB5959}html pre.shiki code .snInM, html code.shiki .snInM{--shiki-default:#BD976A;--shiki-light:#B07D48}html pre.shiki code .somML, html code.shiki .somML{--shiki-default:#666666;--shiki-light:#999999}html pre.shiki code .sG2Fq, html code.shiki .sG2Fq{--shiki-default:#DBD7CAEE;--shiki-light:#393A34}html pre.shiki code .se4ZP, html code.shiki .se4ZP{--shiki-default:#C99076;--shiki-light:#A65E2B}html pre.shiki code .s6_DI, html code.shiki .s6_DI{--shiki-default:#B8A965;--shiki-light:#998418}",{"title":151,"searchDepth":509,"depth":509,"links":510},3,[511,513,516,522,525,528,529],{"id":46,"depth":512,"text":47},2,{"id":54,"depth":512,"text":55,"children":514},[515],{"id":62,"depth":509,"text":63},{"id":116,"depth":512,"text":117,"children":517},[518,520],{"id":129,"depth":509,"text":519},"Installing AFL:",{"id":255,"depth":509,"text":521},"Using AFL:",{"id":339,"depth":512,"text":340,"children":523},[524],{"id":364,"depth":509,"text":365},{"id":415,"depth":512,"text":416,"children":526},[527],{"id":426,"depth":509,"text":427},{"id":478,"depth":512,"text":479},{"id":499,"depth":512,"text":500},[531,532,533],"Bug Bounty","Linux","Penetration Testing","\u002Fimages\u002Fblog\u002Fget-your-first-zero-day-right-now\u002Fzero-day.webp","2024-06-11","Get started finding zero-days in binary software and web applications, from setting up VMware to fuzzing real targets with AFL.","md",{},"\u002Fget-your-first-zero-day-right-now",null,{"title":35,"description":536},"get-your-first-zero-day-right-now","2025-02-05","ifRSlvGqSiE-YA8qZXV02pXX6vE4QiTTeDaO7d7hdvs",{"older":546,"newer":551,"total":556},{"slug":547,"title":548,"date":549,"position":550},"csrf-automate-vulnerability-testing","CSRF - Automate Vulnerability Testing 🛡️🔍","2024-05-23",45,{"slug":552,"title":553,"date":554,"position":555},"build-your-private-local-ai-server-right-now","Build Your Private Local AI Server Right Now!","2024-08-28",43,68,{"id":42,"title":558,"published":559,"url":560,"description":561,"durationSeconds":562,"viewCount":563,"thumbnail":564,"thumbnailSrcset":565},"Get Your First Zero-Day RIGHT NOW! 🚀","2024-06-11T15:00:14Z","https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=FdGyjV4kNwo","🚀 Get ready to dive into the thrilling world of zero-day vulnerabilities! In this video, we'll explore how to discover your first zero-day exploit in both binary software and web applications.",222,2313,"\u002Fimages\u002Fvideos\u002FFdGyjV4kNwo-800.webp","\u002Fimages\u002Fvideos\u002FFdGyjV4kNwo-800.webp 800w, \u002Fimages\u002Fvideos\u002FFdGyjV4kNwo-1280.webp 1280w",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":567},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M7 9.667A2.667 2.667 0 0 1 9.667 7h8.666A2.667 2.667 0 0 1 21 9.667v8.666A2.667 2.667 0 0 1 18.333 21H9.667A2.667 2.667 0 0 1 7 18.333z\"\u002F>\u003Cpath d=\"M4.012 16.737A2 2 0 0 1 3 15V5c0-1.1.9-2 2-2h10c.75 0 1.158.385 1.5 1\"\u002F>\u003C\u002Fg>",1791941258249]