SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Exploit (computer security)</title>

</head>

Exploit (computer security)

</h1>

</header>

An exploit is a method or piece of code that takes advantage of <a href="Vulnerability_(computer_security)" title="Vulnerability (computer security)">vulnerabilities</a> in <a href="Software" title="Software">software</a>, <a href="Application_software" title="Application software">applications</a>, <a href="Computer_network" title="Computer network">networks</a>, <a href="Operating_systems" class="mw-redirect" title="Operating systems">operating systems</a>, or <a href="Computer_hardware" title="Computer hardware">hardware</a>, typically for malicious purposes.

The term "exploit" derives from the English verb "to exploit," meaning "to use something to one’s own advantage."

Exploits are designed to identify flaws, bypass security measures, gain unauthorized access to systems, take control of systems, install <a href="Malware" title="Malware">malware</a>, or <a href="Data_breach" title="Data breach">steal sensitive data</a>.

While an exploit by itself may not be a <a href="Malware" title="Malware">malware</a>, it serves as a vehicle for delivering malicious software by breaching <a href="Security_controls" title="Security controls">security controls</a>.<a href="#cite_note-avast-202-09-29-1">[1]</a><a href="#cite_note-Cisco-2023-10-06-2">[2]</a><a href="#cite_note-Cybersecurity-2019-3">[3]</a><a href="#cite_note-OWASP-4">[4]</a>

Researchers estimate that malicious exploits cost the <a href="Global_economy" class="mw-redirect" title="Global economy">global economy</a> over US$450 billion annually.

In response to this threat, organizations are increasingly utilizing <a href="Cyber_threat_intelligence" title="Cyber threat intelligence">cyber threat intelligence</a> to identify vulnerabilities and prevent hacks before they occur.<a href="#cite_note-5">[5]</a>

<div class="mw-heading mw-heading2"><h2 id="Description">Description</h2></div>

Exploits target vulnerabilities, which are essentially flaws or weaknesses in a system's defenses.

Common targets for exploits include <a href="Operating_systems" class="mw-redirect" title="Operating systems">operating systems</a>, <a href="Web_browsers" class="mw-redirect" title="Web browsers">web browsers</a>, and various <a href="Application_software" title="Application software">applications</a>, where hidden vulnerabilities can compromise the integrity and <a href="Computer_security" title="Computer security">security</a> of <a href="Computer_systems" class="mw-redirect" title="Computer systems">computer systems</a>.

Exploits can cause unintended or unanticipated behavior in systems, potentially leading to severe <a href="Security_breaches" class="mw-redirect" title="Security breaches">security breaches</a>.<a href="#cite_note-MWB-2024-04-15-6">[6]</a><a href="#cite_note-mitre-2020-10-15-7">[7]</a>

Many exploits are designed to provide <a href="Superuser" title="Superuser">superuser</a>-level access to a computer system.

Attackers may use multiple exploits in succession to first gain low-level access and then <a href="Privilege_escalation" title="Privilege escalation">escalate privileges</a> repeatedly until they reach the highest administrative level, often referred to as "root."

This technique of chaining several exploits together to perform a single attack is known as an exploit chain.

Exploits that remain unknown to everyone except the individuals who discovered and developed them are referred to as zero-day or "0day" exploits.

After an exploit is disclosed to the authors of the affected software, the associated vulnerability is often fixed through a <a href="Patch_(computing)" title="Patch (computing)">patch</a>, rendering the exploit unusable.

This is why some <a href="Black_hat_(computer_security)" title="Black hat (computer security)">black hat hackers</a>, as well as military or intelligence agency hackers, do not publish their exploits but keep them private.

One scheme that offers zero-day exploits is known as <a href="Exploit_as_a_service" title="Exploit as a service">exploit as a service</a>.<a href="#cite_note-EAA_1-8">[8]</a>

<div class="mw-heading mw-heading2"><h2 id="Classification">Classification</h2></div>

There are several methods of classifying exploits. The most common is by how the exploit communicates to the vulnerable software.

By Method of Communication:<a href="#cite_note-:0-9">[9]</a>

<ul><li>Remote Exploits: Works over a network and exploits the security vulnerability without any prior access to the vulnerable system.</li>

<li>Local Exploits: Requires prior access or physical access to the vulnerable system, and usually increases the privileges of the person running the exploit past those granted by the system administrator.</li></ul>

By Targeted Component:<a href="#cite_note-:0-9">[9]</a>

<ul><li>Server-Side Exploits: Target vulnerabilities in server applications, such as web servers or database servers, often by sending maliciously crafted requests to exploit security flaws.</li>

<li>Client-Side Exploits: Target vulnerabilities in client applications, such as web browsers (<a href="Browser_exploit" class="mw-redirect" title="Browser exploit">browser exploits</a>) or media players. These exploits often require user interaction, like visiting a malicious website or opening a compromised file. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the <a href="Social_engineering_(security)" title="Social engineering (security)">social engineering</a> method.</li></ul>

The classification of exploits based<a href="#cite_note-10">[10]</a><a href="#cite_note-11">[11]</a> on the type of vulnerability they exploit and the result of running the exploit (e.g., Elevation of Privilege (<a href="Elevation_of_Privilege_(computing)" class="mw-redirect" title="Elevation of Privilege (computing)">EoP</a>), Denial of Service (<a href="Denial_of_Service_(computing)" class="mw-redirect" title="Denial of Service (computing)">DoS</a>), <a href="Spoofing_attack" title="Spoofing attack">spoofing</a>) is a common practice in cybersecurity. This approach helps in systematically identifying and addressing security threats. For instance, the STRIDE threat model categorizes threats into six types, including Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.<a href="#cite_note-12">[12]</a> Similarly, the National Vulnerability Database (NVD) categorizes vulnerabilities by types such as Authentication Bypass by Spoofing and Authorization Bypass.<a href="#cite_note-13">[13]</a>

By Type of <a href="Vulnerability_(computer_security)" title="Vulnerability (computer security)">Vulnerability</a>:

<ul><li>Code Execution Exploits: Allow attackers to execute arbitrary code on the target system, potentially leading to full system compromise.</li>

<li>Denial-of-Service (DoS) Exploits: Aim to disrupt the normal functioning of a system or service, making it unavailable to legitimate users.</li>

<li>Privilege Escalation Exploits: Enable attackers to gain higher privileges on a system than initially granted, potentially leading to unauthorized actions.</li>

<li>Information Disclosure Exploits: Lead to unauthorized access to sensitive information due to vulnerabilities in the system.</li></ul>

Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples.

<div class="mw-heading mw-heading2"><h2 id="Exploitation_Techniques">Exploitation Techniques</h2></div>

Attackers employ various techniques to exploit vulnerabilities and achieve their objectives. Some common methods include:<a href="#cite_note-:0-9">[9]</a>

<ul><li><a href="Buffer_overflow" title="Buffer overflow">Buffer Overflow</a>: Attackers send more data to a buffer than it can handle, causing it to overflow and overwrite adjacent memory, potentially allowing arbitrary code execution.</li>

<li>SQL Injection: Malicious <a href="SQL" title="SQL">SQL</a> code is inserted into input fields of web applications, enabling attackers to access or manipulate databases.</li>

<li>Cross-Site Scripting (XSS): Attackers inject malicious scripts into web pages viewed by other users, potentially leading to session hijacking or data theft.</li>

<li>Cross-Site Request Forgery (CSRF): Attackers trick users into performing actions they did not intend, such as changing account settings, by exploiting the user's authenticated session.</li></ul>

<div class="mw-heading mw-heading3"><h3 id="Zero-click">Zero-click</h3></div>

A zero-click attack is an exploit that requires no <a href="User_interaction" class="mw-redirect" title="User interaction">user interaction</a> to operate – that is to say, no key-presses or mouse clicks.<a href="#cite_note-14">[14]</a> These exploits are commonly the most sought after exploits (specifically on the underground exploit market) because the target typically has no way of knowing they have been compromised at the time of exploitation.

<a href="FORCEDENTRY" title="FORCEDENTRY">FORCEDENTRY</a>, discovered in 2021, is an example of a zero-click attack.<a href="#cite_note-15">[15]</a><a href="#cite_note-16">[16]</a>

In 2022, <a href="NSO_Group" title="NSO Group">NSO Group</a> was reportedly selling zero-click exploits to governments for breaking into individuals' phones.<a href="#cite_note-17">[17]</a>

For mobile devices, the <a href="National_Security_Agency" title="National Security Agency">National Security Agency</a> (NSA) points out that timely updating of software and applications, avoiding public network connections, and turning the device Off and On at least once a week can mitigate the threat of zero-click attacks.<a href="#cite_note-18">[18]</a><a href="#cite_note-19">[19]</a><a href="#cite_note-20">[20]</a> Experts say that protection practices for traditional endpoints are also applicable to mobile devices. Many exploits exist only in <a href="Computer_memory" title="Computer memory">memory</a>, not in files. Theoretically, restarting the device can wipe malware payloads from memory, forcing attackers back to the beginning of the exploit chain.<a href="#cite_note-zdnet25021801-21">[21]</a><a href="#cite_note-22">[22]</a>

<div class="mw-heading mw-heading3"><h3 id="Pivoting">Pivoting</h3></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .ambox{border:1px solid #a2a9b1;border-left:10px solid #36c;background-color:#fbfbfb;box-sizing:border-box}.mw-parser-output .ambox+link+.ambox,.mw-parser-output .ambox+link+style+.ambox,.mw-parser-output .ambox+link+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+style+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+link+.ambox{margin-top:-1px}html body.mediawiki .mw-parser-output .ambox.mbox-small-left{margin:4px 1em 4px 0;overflow:hidden;width:238px;border-collapse:collapse;font-size:88%;line-height:1.25em}.mw-parser-output .ambox-speedy{border-left:10px solid #b32424;background-color:#fee7e6}.mw-parser-output .ambox-delete{border-left:10px solid #b32424}.mw-parser-output .ambox-content{border-left:10px solid #f28500}.mw-parser-output .ambox-style{border-left:10px solid #fc3}.mw-parser-output .ambox-move{border-left:10px solid #9932cc}.mw-parser-output .ambox-protection{border-left:10px solid #a2a9b1}.mw-parser-output .ambox .mbox-text{border:none;padding:0.25em 0.5em;width:100%}.mw-parser-output .ambox .mbox-image{border:none;padding:2px 0 2px 0.5em;text-align:center}.mw-parser-output .ambox .mbox-imageright{border:none;padding:2px 0.5em 2px 0;text-align:center}.mw-parser-output .ambox .mbox-empty-cell{border:none;padding:0;width:1px}.mw-parser-output .ambox .mbox-image-div{width:52px}@media(min-width:720px){.mw-parser-output .ambox{margin:0 10%}}@media print{body.ns-0 .mw-parser-output .ambox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style>

Pivoting is a technique employed by both hackers and <a href="Penetration_test" title="Penetration test">penetration testers</a> to expand their access within a target network. By compromising a system, attackers can leverage it as a platform to target other systems that are typically shielded from direct external access by <a href="Firewall_(computing)" title="Firewall (computing)">firewalls</a>. Internal networks often contain a broader range of accessible machines compared to those exposed to the internet. For example, an attacker might compromise a web server on a corporate network and then utilize it to target other systems within the same network. This approach is often referred to as a multi-layered attack. Pivoting is also known as island hopping.

Pivoting can further be distinguished into <a href="Proxy_server" title="Proxy server">proxy</a> pivoting and <a href="VPN" class="mw-redirect" title="VPN">VPN</a> pivoting:

<ul><li>Proxy pivoting is the practice of channeling traffic through a compromised target using a proxy payload on the machine and launching attacks from the computer.<a href="#cite_note-23">[23]</a> This type of pivoting is restricted to certain <a href="Transmission_Control_Protocol" title="Transmission Control Protocol">TCP</a> and <a href="User_Datagram_Protocol" title="User Datagram Protocol">UDP</a> ports that are supported by the proxy.</li></ul>

<ul><li>VPN pivoting enables the attacker to create an encrypted layer to tunnel into the compromised machine to route any network traffic through that target machine, for example, to run a vulnerability scan on the internal network through the compromised machine, effectively giving the attacker full network access as if they were behind the firewall.</li></ul>

Typically, the proxy or VPN applications enabling pivoting are executed on the target computer as the <a href="Payload_(software)" class="mw-redirect" title="Payload (software)">payload</a> of an exploit.

Pivoting is usually done by infiltrating a part of a network infrastructure (as an example, a vulnerable printer or thermostat) and using a scanner to find other devices connected to attack them. By attacking a vulnerable piece of networking, an attacker could infect most or all of a network and gain complete control.

/* start https://en.wikipedia.org/ */

.mw-parser-output .refbegin{margin-bottom:0.5em}.mw-parser-output .refbegin-hanging-indents>ul{margin-left:0}.mw-parser-output .refbegin-hanging-indents>ul>li{margin-left:0;padding-left:3.2em;text-indent:-3.2em}.mw-parser-output .refbegin-hanging-indents ul,.mw-parser-output .refbegin-hanging-indents ul li{list-style:none}@media(max-width:720px){.mw-parser-output .refbegin-hanging-indents>ul>li{padding-left:1.6em;text-indent:-1.6em}}.mw-parser-output .refbegin-columns{margin-top:0.3em}.mw-parser-output .refbegin-columns ul{margin-top:0}.mw-parser-output .refbegin-columns li{page-break-inside:avoid;break-inside:avoid-column}@media screen{.mw-parser-output .refbegin{font-size:90%}}

/* end https://en.wikipedia.org/ */

</style><div class="refbegin refbegin-columns references-column-width" style="column-width: 30em">

<ul><li><a href="Computer_security" title="Computer security">Computer security</a></li>

<li><a href="Computer_virus" title="Computer virus">Computer virus</a></li>

<li><a href="Crimeware" title="Crimeware">Crimeware</a></li>

<li><a href="Exploit_kit" title="Exploit kit">Exploit kit</a></li>

<li><a href="Hacking%3A_The_Art_of_Exploitation" title="Hacking: The Art of Exploitation">Hacking: The Art of Exploitation</a> (second edition)</li>

<li><a href="Metasploit_Project" class="mw-redirect" title="Metasploit Project">Metasploit</a></li>

<li><a href="Shellcode" title="Shellcode">Shellcode</a></li>

</div>

<div class="mw-heading mw-heading2"><h2 id="Notes">Notes</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFLatto2020" class="citation web cs1">Latto, Nica (2020-09-29). <a rel="nofollow" class="external text" href="https://www.avast.com/c-exploits">"Exploits: What You Need to Know"</a>. Exploits: What You Need to Know. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20240515153218/https://www.avast.com/c-exploits">Archived</a> from the original on 2024-05-15. Retrieved 2024-08-12. <q>An exploit is any attack that takes advantage of vulnerabilities in applications, networks, operating systems, or hardware. Exploits usually take the form of software or code that aims to take control of computers or steal network data.</q></cite>

</li>

<cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/what-is-exploit.html">"What Is an Exploit?"</a>. Cisco. 2023-10-06. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20240531021442/https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/what-is-exploit.html">Archived</a> from the original on 2024-05-31. Retrieved 2024-08-12. <q>An exploit is a program, or piece of code, designed to find and take advantage of a security flaw or vulnerability in an application or computer system, typically for malicious purposes such as installing malware. An exploit is not malware itself, but rather it is a method used by cybercriminals to deliver malware.</q></cite>

</li>

<cite id="CITEREFGonzalezKemp2019" class="citation book cs1">Gonzalez, Joaquin Jay III; Kemp, Roger L. (2019-01-25). <a rel="nofollow" class="external text" href="https://books.google.com/books?id=yyqFDwAAQBAJ&dq=%22A+technique+to+breach+the+security+of+a+network+or+information+system+in+violation+of+security+policy%22&pg=PA241">Cybersecurity: Current Writings on Threats and Protection</a>. Jefferson, North Carolina: McFarland & Company. p. 241. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-1-4766-3541-5</bdi>. <q>A technique to breach the security of a network or information system in violation of security policy.</q></cite>

</li>

<cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/stable-en/03-appendices/05-glossary">"OWASP Secure Coding Practices"</a>. OWASP Foundation. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20240106035619/https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/stable-en/03-appendices/05-glossary">Archived</a> from the original on 2024-01-06. Retrieved 2024-08-12. <q>To take advantage of a vulnerability. Typically this is an intentional action designed to compromise the software's security controls by leveraging a vulnerability.</q></cite>

</li>

<li id="cite_note-5"><a href="#cite_ref-5">^</a> <cite id="CITEREFIndiana_University,_BloomingtonSamtaniChaiHefei_University_of_Technology2022" class="citation journal cs1">Indiana University, Bloomington; Samtani, Sagar; Chai, Yidong; Hefei University of Technology; Chen, Hsinchun; University of Arizona (2022-05-24). <a rel="nofollow" class="external text" href="https://misq.umn.edu/linking-exploits-from-the-dark-web-to-known-vulnerabilities-for-proactive-cyber-threat-intelligence-an-attention-based-deep-structured-semantic-model.html">"Linking Exploits from the Dark Web to Known Vulnerabilities for Proactive Cyber Threat Intelligence: An Attention-Based Deep Structured Semantic Model"</a>. MIS Quarterly. 46 (2): 911–946. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.25300%2FMISQ%2F2022%2F15392">10.25300/MISQ/2022/15392</a>.</cite>

</li>

<cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.malwarebytes.com/exploits">"Exploit Definition"</a>. Malwarebytes. 2024-04-15. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20240516063544/https://www.malwarebytes.com/exploits">Archived</a> from the original on 2024-05-16. Retrieved 2024-08-12. <q>A computer exploit is a type of malware that takes advantage of bugs or vulnerabilities, which cybercriminals use to gain illicit access to a system. These vulnerabilities are hidden in the code of the operating system and its applications just waiting to be discovered and put to use by cybercriminals. Commonly exploited software includes the operating system itself, browsers, Microsoft Office, and third-party applications.</q></cite>

</li>

<cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://attack.mitre.org/techniques/T1588/005/">"Obtain Capabilities: Exploits, Sub-technique T1588.005"</a>. MITRE ATT&CK®. 2020-10-15. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20240524110426/https://attack.mitre.org/techniques/T1588/005/">Archived</a> from the original on 2024-05-24. Retrieved 2024-08-12. <q>Adversaries may buy, steal, or download exploits that can be used during targeting. An exploit takes advantage of a bug or vulnerability in order to cause unintended or unanticipated behavior to occur on computer hardware or software.</q></cite>

</li>

<li id="cite_note-EAA_1-8"><a href="#cite_ref-EAA_1_8-0">^</a> <cite id="CITEREFLeyden,_J.2021" class="citation web cs1">Leyden, J. (16 November 2021). <a rel="nofollow" class="external text" href="https://portswigger.net/daily-swig/exploit-as-a-service-cybercriminals-exploring-potential-of-leasing-out-zero-day-vulnerabilities">"Exploit-as-a-service: Cybercriminals exploring potential of leasing out zero-day vulnerabilities"</a>. The Daily Swig | Cybersecurity news and views. PortSwigger Ltd. Retrieved 18 December 2023.</cite>

</li>

<li id="cite_note-:0-9">^ <a href="#cite_ref-:0_9-0">a</a> <a href="#cite_ref-:0_9-1">b</a> <a href="#cite_ref-:0_9-2">c</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.ituonline.com/tech-definitions/what-is-an-exploit/">"What Is An Exploit?"</a>. 2024-06-18. Retrieved 2025-03-15.</cite>

</li>

<li id="cite_note-10"><a href="#cite_ref-10">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.exploit-db.com/">"Exploits Database by Offensive Security"</a>. www.exploit-db.com.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.rapid7.com/db/modules/">"Exploit Database | Rapid7"</a>. www.rapid7.com.</cite>

</li>

<li id="cite_note-12"><a href="#cite_ref-12">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.purestorage.com/knowledge/stride-threat-model.html">"What Is the STRIDE Threat Model?"</a>. www.purestorage.com. Retrieved 2025-03-15.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://nvd.nist.gov/vuln/categories">"National Vulnerability Database - Vulnerabilities"</a>. nvd.nist.gov. Retrieved 2025-03-15.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite class="citation magazine cs1"><a rel="nofollow" class="external text" href="https://www.wired.com/story/sneaky-zero-click-attacks-hidden-menace/">"Sneaky Zero-Click Attacks Are a Hidden Menace"</a>. Wired. <a href="ISSN_(identifier)" class="mw-redirect" title="ISSN (identifier)">ISSN</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/issn/1059-1028">1059-1028</a>. Retrieved 2021-09-14.</cite>

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation magazine cs1"><a rel="nofollow" class="external text" href="https://www.wired.com/story/apple-imessage-zero-click-hacks/">"The Stealthy iPhone Hacks That Apple Still Can't Stop"</a>. Wired. <a href="ISSN_(identifier)" class="mw-redirect" title="ISSN (identifier)">ISSN</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/issn/1059-1028">1059-1028</a>. Retrieved 2021-09-14.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite id="CITEREFWhittaker2021" class="citation web cs1">Whittaker, Zack (24 August 2021). <a rel="nofollow" class="external text" href="https://techcrunch.com/2021/08/24/nso-pegasus-bahrain-iphone-security/">"A new NSO zero-click attack evades Apple's iPhone security protections, says Citizen Lab"</a>. <a href="TechCrunch" title="TechCrunch">TechCrunch</a>. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20210824103937/https://techcrunch.com/2021/08/24/nso-pegasus-bahrain-iphone-security/">Archived</a> from the original on 2021-08-24. Retrieved 2025-05-25.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite id="CITEREFRyan_Gallagher2022" class="citation news cs1">Ryan Gallagher (February 18, 2022). <a rel="nofollow" class="external text" href="https://www.insurancejournal.com/news/international/2022/02/18/654917.htm">"Beware of 'Zero-Click' Hacks That Exploit Security Flaws in Phones' Operating Systems"</a>. Insurance Journal.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.zdnet.com/article/why-you-should-power-off-your-phone-once-a-week-according-to-the-nsa/">"Why you should power off your phone once a week - according to the NSA"</a>. ZDNET. Retrieved 2025-03-01.</cite>

</li>

<li id="cite_note-19"><a href="#cite_ref-19">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.nsa.gov/Press-Room/Telework-and-Mobile-Security-Guidance/">"Telework and Mobile Security Guidance"</a>. www.nsa.gov. Retrieved 2025-03-01.</cite>

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite id="CITEREFWinder" class="citation web cs1">Winder, Davey. <a rel="nofollow" class="external text" href="https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/">"NSA Warns iPhone And Android Users To Turn It Off And On Again"</a>. Forbes. Retrieved 2025-03-01.</cite>

</li>

<li id="cite_note-zdnet25021801-21"><a href="#cite_ref-zdnet25021801_21-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.zdnet.com/article/why-rebooting-your-phone-daily-is-your-best-defense-against-zero-click-attacks/">"Why rebooting your phone daily is your best defense against zero-click attacks"</a>. ZDNET. Retrieved 2025-03-01.</cite>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite id="CITEREFTaylor2020" class="citation web cs1">Taylor, Craig (2020-01-10). <a rel="nofollow" class="external text" href="https://cyberhoot.com/cybrary/exploit-chain/">"Exploit Chain - CyberHoot Cyber Library"</a>. CyberHoot. Retrieved 2025-03-01.</cite>

</li>

<li id="cite_note-23"><a href="#cite_ref-23">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.digitalbond.com/index.php/2010/07/12/metasploit-basics-part-3-pivoting-and-interfaces/">"Metasploit Basics – Part 3: Pivoting and Interfaces"</a>. Digital Bond.</cite>

</li>

</ol></div></div>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li> Media related to <a href="https://commons.wikimedia.org/wiki/Category:Computer_security_exploits" class="extiw external" title="commons:Category:Computer security exploits">Computer security exploits</a> at Wikimedia Commons</li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox authority-control" aria-label="Navbox491" style="padding:3px"><table class="nowraplinks hlist navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Authority control databases: National </th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"><ul><li><a rel="nofollow" class="external text" href="https://catalogue.bnf.fr/ark:/12148/cb18096610j">France</a></li><li><a rel="nofollow" class="external text" href="https://data.bnf.fr/ark:/12148/cb18096610j">BnF data</a></li></ul></div></td></tr></tbody></table></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Information_security92" style="font-size:114%;margin:0 4em"><a href="Information_security" title="Information security">Information security</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Threat_(computer)" class="mw-redirect" title="Threat (computer)">Threats</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Adware" title="Adware">Adware</a></li>

<li><a href="Advanced_persistent_threat" title="Advanced persistent threat">Advanced persistent threat</a></li>

<li><a href="Arbitrary_code_execution" title="Arbitrary code execution">Arbitrary code execution</a></li>

<li><a href="Backdoor_(computing)" title="Backdoor (computing)">Backdoors</a></li>

<li>Bombs

<li><a href="Logic_bomb" title="Logic bomb">Logic</a></li>

<li><a href="Hardware_backdoor" title="Hardware backdoor">Hardware backdoors</a></li>

<li><a href="Code_injection" title="Code injection">Code injection</a></li>

<li><a href="Crimeware" title="Crimeware">Crimeware</a></li>

<li><a href="Cross-site_scripting" title="Cross-site scripting">Cross-site scripting</a></li>

<li><a href="Cross-site_leaks" title="Cross-site leaks">Cross-site leaks</a></li>

<li><a href="DOM_clobbering" title="DOM clobbering">DOM clobbering</a></li>

<li><a href="History_sniffing" title="History sniffing">History sniffing</a></li>

<li><a href="Cryptojacking" title="Cryptojacking">Cryptojacking</a></li>

<li><a href="Botnet" title="Botnet">Botnets</a></li>

<li><a href="Data_breach" title="Data breach">Data breach</a></li>

<li><a href="Drive-by_download" title="Drive-by download">Drive-by download</a></li>

<li><a href="Browser_Helper_Object" title="Browser Helper Object">Browser Helper Objects</a></li>

<li><a href="Computer_virus" title="Computer virus">Viruses</a></li>

<li><a href="Data_scraping" title="Data scraping">Data scraping</a></li>

<li><a href="Denial-of-service_attack" title="Denial-of-service attack">Denial-of-service attack</a></li>

<li><a href="Eavesdropping" title="Eavesdropping">Eavesdropping</a></li>

<li><a href="Email_fraud" title="Email fraud">Email fraud</a></li>

<li><a href="Email_spoofing" title="Email spoofing">Email spoofing</a></li>

<li><a href="Dialer#Fraudulent_dialer" title="Dialer">Fraudulent dialers</a></li>

<li><a href="Hacktivism" title="Hacktivism">Hacktivism</a></li>

<li><a href="Infostealer" title="Infostealer">Infostealer</a></li>

<li><a href="Insecure_direct_object_reference" title="Insecure direct object reference">Insecure direct object reference</a></li>

<li><a href="Keystroke_logging" title="Keystroke logging">Keystroke loggers</a></li>

<li><a href="Malware" title="Malware">Malware</a></li>

<li><a href="Payload_(computing)" title="Payload (computing)">Payload</a></li>

<li><a href="Phishing" title="Phishing">Phishing</a>

<ul><li><a href="Voice_phishing" title="Voice phishing">Voice</a></li></ul></li>

<li><a href="Polymorphic_engine" title="Polymorphic engine">Polymorphic engine</a></li>

<li><a href="Privilege_escalation" title="Privilege escalation">Privilege escalation</a></li>

<li><a href="Ransomware" title="Ransomware">Ransomware</a></li>

<li><a href="Rootkit" title="Rootkit">Rootkits</a></li>

<li><a href="Scareware" title="Scareware">Scareware</a></li>

<li><a href="Shellcode" title="Shellcode">Shellcode</a></li>

<li><a href="Spamming" title="Spamming">Spamming</a></li>

<li><a href="Social_engineering_(security)" title="Social engineering (security)">Social engineering</a></li>

<li><a href="Spyware" title="Spyware">Spyware</a></li>

<li><a href="Software_bug" title="Software bug">Software bugs</a></li>

<li><a href="Trojan_horse_(computing)" title="Trojan horse (computing)">Trojan horses</a></li>

<li><a href="Hardware_Trojan" title="Hardware Trojan">Hardware Trojans</a></li>

<li><a href="Remote_access_trojan" class="mw-redirect" title="Remote access trojan">Remote access trojans</a></li>

<li><a href="Vulnerability_(computer_security)" title="Vulnerability (computer security)">Vulnerability</a></li>

<li><a href="Web_shell" title="Web shell">Web shells</a></li>

<li><a href="Wiper_(malware)" title="Wiper (malware)">Wiper</a></li>

<li><a href="Computer_worm" title="Computer worm">Worms</a></li>

<li><a href="SQL_injection" title="SQL injection">SQL injection</a></li>

<li><a href="Rogue_security_software" title="Rogue security software">Rogue security software</a></li>

<li><a href="Zombie_(computing)" title="Zombie (computing)">Zombie</a></li></ul>

</div></td><td class="noviewer navbox-image" rowspan="3" style="width:1px;padding:0 0 0 2px"><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Defenses</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Application_security" title="Application security">Application security</a>

<ul><li><a href="Secure_coding" title="Secure coding">Secure coding</a></li>

<li>Secure by default</li>

<li><a href="Secure_by_design" title="Secure by design">Secure by design</a>

<ul><li><a href="Misuse_case" title="Misuse case">Misuse case</a></li></ul></li></ul></li>

<li><a href="Computer_access_control" title="Computer access control">Computer access control</a>

<ul><li><a href="Authentication" title="Authentication">Authentication</a>

<ul><li><a href="Multi-factor_authentication" title="Multi-factor authentication">Multi-factor authentication</a></li></ul></li>

<li><a href="Authorization" title="Authorization">Authorization</a></li></ul></li>

<li><a href="Computer_security_software" title="Computer security software">Computer security software</a>

<ul><li><a href="Antivirus_software" title="Antivirus software">Antivirus software</a></li>

<li><a href="Security-focused_operating_system" title="Security-focused operating system">Security-focused operating system</a></li></ul></li>

<li><a href="Data-centric_security" title="Data-centric security">Data-centric security</a></li>

<li><a href="Obfuscation_(software)" title="Obfuscation (software)">Software obfuscation</a></li>

<li><a href="Data_masking" title="Data masking">Data masking</a></li>

<li><a href="Encryption" title="Encryption">Encryption</a></li>

<li><a href="Firewall_(computing)" title="Firewall (computing)">Firewall</a></li>

<li><a href="Intrusion_detection_system" title="Intrusion detection system">Intrusion detection system</a>

<ul><li><a href="Host-based_intrusion_detection_system" title="Host-based intrusion detection system">Host-based intrusion detection system</a> (HIDS)</li>

<li><a href="Anomaly_detection" title="Anomaly detection">Anomaly detection</a></li></ul></li>

<li><a href="Information_security_management" title="Information security management">Information security management</a>

<ul><li><a href="Information_risk_management" class="mw-redirect" title="Information risk management">Information risk management</a></li>

<li><a href="Security_information_and_event_management" title="Security information and event management">Security information and event management</a> (SIEM)</li></ul></li>

<li><a href="Runtime_application_self-protection" title="Runtime application self-protection">Runtime application self-protection</a></li>

<li><a href="Site_isolation" title="Site isolation">Site isolation</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Related security topics</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Computer_security" title="Computer security">Computer security</a></li>

<li><a href="Automotive_security" title="Automotive security">Automotive security</a></li>

<li><a href="Cybercrime" title="Cybercrime">Cybercrime</a>

<ul><li><a href="Cybersex_trafficking" title="Cybersex trafficking">Cybersex trafficking</a></li>

<li><a href="Computer_fraud" title="Computer fraud">Computer fraud</a></li></ul></li>

<li><a href="Cybergeddon" title="Cybergeddon">Cybergeddon</a></li>

<li><a href="Cyberterrorism" title="Cyberterrorism">Cyberterrorism</a></li>

<li><a href="Cyberwarfare" title="Cyberwarfare">Cyberwarfare</a></li>

<li><a href="Electronic_warfare" title="Electronic warfare">Electronic warfare</a></li>

<li><a href="Information_warfare" title="Information warfare">Information warfare</a></li>

<li><a href="Internet_security" title="Internet security">Internet security</a></li>

<li><a href="Mobile_security" title="Mobile security">Mobile security</a></li>

<li><a href="Network_security" title="Network security">Network security</a></li>

<li><a href="Copy_protection" title="Copy protection">Copy protection</a></li>

<li><a href="Digital_rights_management" title="Digital rights management">Digital rights management</a></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-06-26" href="https://en.wikipedia.org/wiki/?title=Exploit_(computer_security)&oldid=1297450089">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>