{"uuid": "51e64b67-fee7-4d9b-aa15-2b67b1be0e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "https://t.me/hacking_Attack/56938", "content": "How does one manage to write an exploit?\nhttps://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/\n\nOk, this might be a really dumb and broad question and is just for satisfying my curiosity. How does one actually end up writing an exploit? For example, I am reading through CVE-2019-11231 (https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11231&scoretype=cvssv3). The code can be found here (https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/getsimplecms_unauth_code_exec.rb).  I understand how this exploit works and how it does what it does. What I don't understand is how the author managed to find the vulnerability in this app. Is it far-fetched to assume that they read the source code of the GetSimpleCMS, checked all the other web components (Appache, PHP, etc...) and managed to figure out everything that is written in the exploit?  Are there any of you who write their own exploits? If so, could you please give me more insight on how you manage to do it?  It's just that I am very impressed on how somebody is this skilled and the whole procedure of designing an exploit looks like total black magic to me. :D    submitted by    /u/valjeanjean1  (https://www.reddit.com/user/valjeanjean1) \n [link] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)   [comments] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.545591Z"}