Exploit

lastmod 2023-04-24created 2023-02-075 edits

An exploit is a procedure, sequence of commands, script, program, or particular piece of data crafted to make computer software, hardware, or computer-related electronics perform actions intended by an attacker by taking advantage of design flaws such as bugs and security vulnerabilities; the term also refers to the act of attacking with such things.

Exploits mainly aim to gain control of the target computer or to cause a denial-of-service attack (DoS).

Types

Exploits can be divided in many ways depending on the classification method, but some representative ones are listed below.

• By the type of security vulnerability used: BOF exploits, CSRF exploits, XSS exploits, and so on; see the security vulnerability page.
• By where the exploit runs
  • Local exploit : the exploit runs on the target itself.
  • Remote exploit : runs on the attacker's computer and targets another computer.
• By the result (purpose) the exploit brings about: EoP exploits, DoS exploits, spoofing exploits, and so on
• An exploit created and used at a point when the software vulnerability is unknown to the developers and no patch exists is specifically called a zero-day exploit.

See also

• Security
• Ronin - open-source Ruby toolkit for security research and development
• GDB Enhanced Features (GEF)
• pwntools - CTF toolkit - (helps make exploits easy with python)

Favorite site

• Exploit (computer security) - Wikipedia