Content deleted Content added
Cyberkiborg (talk | contribs) I tried to structure the data more clearly, added sources and data, formalized the lists, and corrected the layout a bit |
m Reverted edits by 103.143.243.26 (talk) (AV) |
||
| (8 intermediate revisions by 8 users not shown) | |||
Line 1:
{{Short description|Method of attack on computer systems}}
An '''exploit''' is a method or piece of code that takes advantage of [[Vulnerability (computer security)|vulnerabilities]] in [[software]], [[Application software|applications]], [[Computer network|networks]], [[operating systems]], or [[Computer hardware|hardware]], typically for malicious purposes.
The term "exploit" derives from the English verb "to exploit," meaning "to use something to one’s own advantage."
Line 11 ⟶ 10:
Researchers estimate that malicious exploits cost the [[global economy]] over US$450 billion annually.
In response to this threat, organizations are increasingly utilizing [[cyber threat intelligence]] to identify vulnerabilities and prevent hacks before they occur.<ref>{{Cite journal |last1=Indiana University, Bloomington |last2=Samtani |first2=Sagar |last3=Chai |first3=Yidong |last4=Hefei University of Technology |last5=Chen |first5=Hsinchun |last6=University of Arizona |date=2022-05-24 |title=Linking Exploits from the Dark Web to Known Vulnerabilities for Proactive Cyber Threat Intelligence: An Attention-Based Deep Structured Semantic Model |url=https://misq.umn.edu/linking-exploits-from-the-dark-web-to-known-vulnerabilities-for-proactive-cyber-threat-intelligence-an-attention-based-deep-structured-semantic-model.html |journal=MIS Quarterly |volume=46 |issue=2 |pages=911–946 |doi=10.25300/MISQ/2022/15392|url-access=subscription }}</ref>
== Description ==
Line 27 ⟶ 26:
After an exploit is disclosed to the authors of the affected software, the associated vulnerability is often fixed through a [[Patch (computing)|patch]], rendering the exploit unusable.
This is why some [[Black hat (computer security)|black hat hackers]], as well as military or intelligence agency hackers, do not publish their exploits but keep them private.
One scheme that offers zero-day exploits is known as [[exploit as a service]].<ref name=EAA_1>{{cite web| title=Exploit-as-a-service: Cybercriminals exploring potential of leasing out zero-day vulnerabilities| author=Leyden, J.| work=The Daily Swig | Cybersecurity news and views| url=https://portswigger.net/daily-swig/exploit-as-a-service-cybercriminals-exploring-potential-of-leasing-out-zero-day-vulnerabilities| publisher=PortSwigger Ltd| date=16 November 2021| access-date=18 December 2023}}</ref>
==Classification==
Line 44 ⟶ 43:
The classification of exploits based<ref>{{cite web |title=Exploits Database by Offensive Security |url=https://www.exploit-db.com/ |website=www.exploit-db.com}}</ref><ref>{{cite web |title=Exploit Database {{!}} Rapid7 |url=https://www.rapid7.com/db/modules/ |website=www.rapid7.com}}</ref> on the type of vulnerability they exploit and the result of running the exploit (e.g., Elevation of Privilege ([[Elevation of Privilege (computing)|EoP]]), Denial of Service ([[Denial of Service (computing)|DoS]]), [[Spoofing attack|spoofing]]) is a common practice in cybersecurity. This approach helps in systematically identifying and addressing security threats. For instance, the STRIDE threat model categorizes threats into six types, including Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.<ref>{{Cite web |title=What Is the STRIDE Threat Model? |url=https://www.purestorage.com/knowledge/stride-threat-model.html |access-date=2025-03-15 |website=www.purestorage.com |language=en-US}}</ref> Similarly, the National Vulnerability Database (NVD) categorizes vulnerabilities by types such as Authentication Bypass by Spoofing and Authorization Bypass.<ref>{{Cite web |title=National Vulnerability Database - Vulnerabilities |url=https://nvd.nist.gov/vuln/categories |access-date=2025-03-15 |website=nvd.nist.gov}}</ref>
''By Type of [[Vulnerability (computer security)|
* '''Code Execution Exploits:''' Allow attackers to execute arbitrary code on the target system, potentially leading to full system compromise.
Line 62 ⟶ 61:
=== Zero-click ===
A zero-click attack is an exploit that requires no [[user interaction]] to operate – that is to say, no key-presses or mouse clicks.<ref>{{Cite magazine|title=Sneaky Zero-Click Attacks Are a Hidden Menace
[[FORCEDENTRY]], discovered in 2021, is an example of a zero-click attack.<ref>{{Cite magazine|title=The Stealthy iPhone Hacks That Apple Still Can't Stop
In 2022, [[NSO Group]] was reportedly selling zero-click exploits to governments for breaking into individuals' phones.<ref>{{cite news |journal=Insurance Journal |url=https://www.insurancejournal.com/news/international/2022/02/18/654917.htm |title=Beware of 'Zero-Click' Hacks That Exploit Security Flaws in Phones' Operating Systems |author=Ryan Gallagher |date=February 18, 2022}}</ref>
For mobile devices, the [[National Security Agency]] (NSA) points out that timely updating of software and applications, avoiding public network connections, and turning the device Off and On at least once a week can mitigate the threat of zero-click attacks.<ref>{{Cite web |title=Why you should power off your phone once a week - according to the NSA |url=https://www.zdnet.com/article/why-you-should-power-off-your-phone-once-a-week-according-to-the-nsa/ |access-date=2025-03-01 |website=ZDNET
=== Pivoting ===
{{Off topic|date=August 2024|Pivoting (computer security)|Pivoting is a follow-on to an exploit}}
Pivoting is a technique employed by both hackers and [[penetration test]]ers to expand their access within a target network. By compromising a system, attackers can leverage it as a platform to target other systems that are typically shielded from direct external access by [[Firewall (computing)|firewalls]]. Internal networks often contain a broader range of accessible machines compared to those exposed to the internet. For example, an attacker might compromise a web server on a corporate network and then utilize it to target other systems within the same network. This approach is often referred to as a multi-layered attack. Pivoting is also known as ''island hopping''.
| |||