Code or technique that takes advantage of a software vulnerability to cause unintended behaviour.
An exploit is code, software, or technique that takes advantage of a vulnerability to cause unintended behaviour—typically gaining unauthorised access, escalating privileges, or executing malicious code. Exploits target specific vulnerabilities; once a patch is released, the exploit's effectiveness diminishes against updated systems. Zero-day exploits (targeting unknown vulnerabilities) are particularly valuable to attackers. Exploit kits package multiple exploits to automatically attack victims based on their vulnerable software.
Why It Matters
The DSC Perspective:
Exploits turn vulnerabilities into attacks. Prompt patching is essential because exploits often appear quickly after vulnerabilities are disclosed. Vulnerability management identifies what needs patching; patching prevents exploit success.