Exploit development concepts

Exploits can be of many different types. They can be classified based on various parameters such as platforms, architecture, and purpose served. Whenever any given vulnerability is discovered, there are either of three following possibilities:

• An exploit code already exists
• Partial exploit code exists that needs some modification to execute malicious payload
• No exploit code exists, and there's a need to develop new exploit code from scratch

The first two cases look quite easy as the exploit code exists and may need some minor tweaks to get it executed. However, the third case, wherein a vulnerability has just been discovered and no exploit code exists, is the real challenge. In such a case, you might need to perform some of the following tasks:

• Gather basic information, such as the platform and architecture the vulnerability is supported on
• Get all possible details about how the vulnerability can be exploited and what the possible attack vectors are
• Use techniques such...