Understanding exploit development concepts
Exploits can be of various types. Primarily, exploits can be categorized based on various factors, such as platforms, architecture, and purpose served.
Whenever any given vulnerability is discovered, there are one of the following possibilities:
- An exploit code for the vulnerability already exists.
- A partial exploit code exists. However, the code needs to be modified and customized in order to execute the payload.
- No exploit code exists and it needs to be developed from scratch.
As mentioned, it could be an easy situation where the complete or partial exploit code is readily available and only needs minor tweaks for execution. However, it can be a really challenging situation if no exploit code exists at all.
In this case, you might need to perform some of the following tasks:
- Get some basic information and details, such as the platform and architecture the vulnerability is supported on.
- Enumerate...
