Exploit (computer security): Difference between revisions

Revision as of 06:45, 12 August 2024

Revision as of 07:07, 12 August 2024

Line 11:

A ''remote exploit'' works over a network and exploits the security vulnerability without any prior access to the vulnerable system.

A ''local exploit'' requires {{Clarify | text = prior access to the vulnerable system| date = AugAugust 2024 | reason = It's unclear if this means requiring physical access to the system, or requiring an already compromised system.}} and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. A common form of exploits against client applications are [[browser exploit]]s.

Exploits against client applications may also require some interaction with the user and thus may be used in combination with the [[social engineering (security)|social engineering]] method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples.