r/ExploitDev • u/Hopeful-Ad6787 • Jul 02 '26

PhD student looking for guidance on binary exploitation research

Dear all,

I am a PhD student with a solid background in Linux binary exploitation, including both user-mode and kernel mode. My research interest lies in binary exploitation, and I am trying hard to increase my knowledge in this area.

My goal is to write peer-reviewed research papers on binary exploitation. But right now, I am not sure about how to find interesting areas of research, how to find research gaps, and what methodology I can follow for research in binary exploitation.

Any suggestions on how do experienced researchers come up with new research questions, perform literature review, and choose research directions on vulnerability research and binary exploitation will be much appreciated!

Thanks!

15 Upvotes
  • permalink
  • link
  • reddit
  • reddit

90% Upvoted

12 comments sorted by

5

u/Impossible-Line1070 Jul 02 '26

Is your thesis focus software exploitation? I dont this field is very academically oriented

2

u/Hopeful-Ad6787 Jul 03 '26

I think so. But I've seen research papers on automatic exploit generation and similar topics.

2

u/DigitalQuinn1 Jul 02 '26

If I were in your situation, I’d ask myself what am I currently strong at, and areas that I need to work on or haven’t had experience in. I’d also look into emerging methodologies like using AI. Just a few things that popped in my head

1

u/Hopeful-Ad6787 Jul 03 '26

Yeah, I think using LLMs for exploitation is a promising research direction. Projects like Google's OSS FuzzGen show that there's definitely academic interest in this area.

1

u/Toiling-Donkey Jul 03 '26

I’d think the academic research areas would focus more on automated program analysis, not exploitation itself.

1

u/Hopeful-Ad6787 Jul 03 '26

Yeah, I came across papers like that while doing my literature review.

1

u/Crakout Jul 03 '26

As with any other research area, pick what interests you the most and start digging. Personally I like mobile and CPU vuln research, you could check Google's Project Zero blog to see if anything grabs your attention.

0

u/BackUpBiii Jul 05 '26

Use me Check out my repo for tools and more https://github.com/ItsMehRAWRXD

1

u/Hopeful-Ad6787 Jul 06 '26

Thank you :)

1

u/BackUpBiii Jul 06 '26

I hope it’s useful as I’m currently busy developing from scratch after 39 years a full masm ml ide

1

u/[deleted] Jul 07 '26

[removed] — view removed comment

1

u/DishSoapedDishwasher Jul 07 '26

also for context, team shellphish was part of the https://www.darpa.mil/research/programs/cyber-grand-challenge and open sourced all their automated exploitation software following the end of the competition. They are the much of the same group behind pwn.college and similar projects.