https://nickzero.co.uk/tags/exploit-dev/Recent content in Exploit-Dev on Nick ZeroHugoen-gbMon, 20 Jul 2026 10:00:00 +0100https://nickzero.co.uk/posts/automating-exploit-discovery-with-mcp/Mon, 20 Jul 2026 10:00:00 +0100https://nickzero.co.uk/posts/automating-exploit-discovery-with-mcp/<p>Exploit development is mostly alt-tabbing. You find an address in Ghidra, paste it into WinDbg, read a register, go back to Ghidra to work out what that register meant, and somewhere in the middle of all that you forget whether the offset was 104 or 140. It&rsquo;s an enormous amount of very precise clerical work, and humans are famously excellent at that.</p> <p>Reverse engineering and exploit dev are tool-driven activities. We live in a disassembler and a debugger, and most of the job is asking those two tools very specific questions. What calls <code>memcpy</code>? What&rsquo;s at this address? What&rsquo;s in RCX when we crash? How far is it from the buffer to the saved return address?</p>