exploits

An exploit is code, data, or a sequence of actions that takes advantage of a vulnerability in a computer system to cause unintended behavior. This can include gaining unauthorized access, executing arbitrary code, escalating privileges, or causing a denial of service. A vulnerability is a flaw in software, hardware, or configuration that an exploit can leverage.

Exploits are classified by delivery and objective. Remote exploits are triggered over a network; local exploits require access to the target. Client-side exploits attack software running on a user’s device, while server-side exploits target services. Some exploits are zero-day, meaning the vulnerability is unknown to the vendor; others rely on known flaws for which patches exist.

Exploits are often used as part of a chain, combining multiple weaknesses to reach a goal. They are studied in vulnerability research, tested in controlled environments, and used (ethically) in penetration testing to improve defenses. Disclosure processes and patch management aim to limit risk by making fixes available promptly.

Defenses include applying security patches, mitigations such as address space layout randomization and data execution prevention, least-privilege access, input validation, network segmentation, and robust monitoring. Exploit details are typically restricted to reduce harm, while public discussion focuses on defense and resilience.

Notable examples include Heartbleed, EternalBlue, and SQL Slammer, illustrating how exploits can spread or expose sensitive data when patches lag behind.