New vulnerabilities are being found in code daily. Infact, 18,000+ new vulnerabilities are estimated to be disclosed in 2018, with a current growth rate of 27 percent compared to 2017. Of course, those are the ones we know about, but what about the unidentified vulnerabilities - the zero-days in your infrastructure waiting to be popped? Would you like to know how to find them?In this session Jacob will share his expertise of hunting for zero-days.Learning Outcomes:Where to start when looking for zero-daysWhat to use - which scripts, other tools What to do if you find a vulnerabilityHow a vulnerability is typically verifiedAn overview of responsible disclosure practices security researchers adhere to