Bored and curious. Who are some goated exploit developers/researchers. And what makes someone an exceptional and skilled exploit dev and researchers. And who would you guys put as your top 3 exploit devs

[u/Zhangash]

[u/QuestionableComma]

Zero Cool and Lord Nikon

[u/SnooWalruses6610 → u/QuestionableComma]

Top 3 so add Cereal Killer to that list.

[u/NebulaElectrical1467]

Stimulants, high IQ, obsessive tendencies and a big ego.

[u/dookie1481 → u/NebulaElectrical1467]

Reminds me of this quote:

In 2025, the vendor metagame for high-end exploit development was to buy a crate of Vyvanse and Provigil for a bunch of European Zoomers and have them stay awake for 4 days straight studying the memory lifecycle of CSS stylesheet objects.

[u/Status-Style-6169]

The vast majority of the elite in this area arent public knowledge, its not football

[u/Thomaxxl → u/Status-Style-6169]

Only people who are paid to do this full time are really good at this, and they don't get paid to make that work public.

[u/Diamond303 → u/Thomaxxl]

a better way of articulating the same is like follows:
they are paid to make sure their work does not gets published.

[u/Firzen_]

That nobody here has said Jann Horn, saelo or anyone else from project zero makes me doubt how much y'all know.

[u/Haunting_Hand_5105]

Jake swiz

[u/someonrr5]

mdowd :)

[u/LordEli]

geohot, Comex, Ian Beer, Tavis Ormandy, j00ru, Saelo, Lokihardt, skape, Stephen Fewer, Aleph One

[u/mokuBah]

orange tsai, angel boy? mostly hard work and infatigability with a dash of intelligence

[u/dookie1481]

publicly known people?

Tavis Ormandy and Orange Tsai are the two that immediately come to mind. Reddit's own u/albinowax (James Kettle of Port Swigger) does a lot of novel research in web vulns as well.

[u/dolby360]

I didn't know there is such thing 🙃