There has been great discussion about what vulnerabilities are, and how to exploit them. What is still somewhat a mystery is how these vulnerabilities are found. While each person has their own techniques, this speech will reveal some solid methodologies and secrets of the trade from a very successful group of professional security researchers.