I got some doubts running in my mind ,so as usual i decided to post here.
I just finished my ccna,i had a tought when i am doing my ccna,
There are lots of local exploits being published for operating systems like linux and windows throught the year.
i)But the amount of bugs(local exploitation bugs such as an bof,stack offerflow,race condition bla bla) i had seen for the cisco ios is very rare,it is just an proprietary operating system
why there isn't many such bugs for cisco ios ?
ii) i dont know what kind of security features make it special,as far as i have searched i had seen some presentations by fx phenoelit other than that i couldn't find any promising materials regarding that ,for me it looks like an area which wasn't explored much(just my personal view,correct me if i am wrong),why is this ?
iii)is there any materials for understanding the internal ios implementations and things ?
Next question is about how to structure my learning towards local exploitation?
here are the things i had done till now
i)studied operating systems concepts book by "operating system concepts silberschatz" till chapter 14(at least 3 times,so i feel i am ok with the os theory part)
ii)i feel i had good basic understanding about networks,i had completed ccna and rhce training.
iii)regarding coding i am just a novice,i just know what are things and for what it is used(just having some theoretical knowledge)
iv)have basic understanding of web-application technologies and attcks
1)i want some advice from you guys (just another guy asking this 1000th time)how can i continue from here to become good in writing local exploits and reverse engg?
2)what are the things i should start from here like learning processor,assembly,h/w etc.,i don't know in which order i should begin,hope some one will clarify me..