166 terms · 75/46/45
Technique № 010 · class: execution

Exploitation

Exploitation involves leveraging a flaw in software, hardware, or configuration to execute unauthorized code or bypass security controls. Vulnerabilities can exist in operating systems, applications, network services, or firmware.

Term

description · examples · notes

Exploitation involves leveraging a flaw in software, hardware, or configuration to execute unauthorized code or bypass security controls. Vulnerabilities can exist in operating systems, applications, network services, or firmware.

Description

Attackers develop or purchase exploits targeting specific vulnerabilities. Successful exploitation can enable arbitrary code execution, privilege escalation, or complete system takeover.

Examples

  • Exploiting a web server vulnerability to execute commands on the operating system
  • Leveraging a document parser flaw to run code when a file is opened
  • Exploiting a network protocol vulnerability for remote code execution

Notes

  • Regular software patching eliminates known vulnerabilities but does not protect against zero-day exploits.

Mentioned in the news

tags
execution web initial access
◳Composite

Threats

used by 22

Threats that use it. Select one to open its page.

Defenses

countered by 16

How it is countered. Select one to open its page.