Los enlaces son solo para miembros. Registrate o iniciá sesión
<br /><br />What is an exploit?<br /><br />The usual definitions describe it as a program or piece of code that takes advantage of a security hole (vulnerability) in an application or system, in such a way that an attacker could use it for their own benefit.<br /><br />Translated to real life, it would be as if a lock model (system or application) had a design flaw that allowed us to make keys that open it (exploit), and thus gain access to the place it is meant to protect and commit criminal acts (malware).<br /><br />There is confusion among users and a certain myth that an exploit can be considered malware. The reality is that, as we saw in the example, it is not malicious code in itself, but rather the key that lets malicious code access our system.<br /><br />In this way, it can give malware the permissions it needs to run on a system and infect it by taking advantage of a vulnerability. <br /><br />Types of exploits<br /><br />Now that we know what an exploit is, we can distinguish between two types: known and unknown (0-day). Known exploits are those we are aware of, and we can take measures to prevent our systems from being affected. They are usually the ones that appear in most security news, and several show up every day, just as the vulnerabilities they try to exploit keep appearing.<br /><br />For this reason, it is important that you stay informed about which vulnerabilities are being leveraged by exploits and check that all your systems and applications are up to date and, if no update is available, apply techniques that help mitigate the possible threats.<br /><br />On the other hand, we mentioned unknown exploits or 0-days, which we often see in security news. These are used against vulnerabilities that have not yet been disclosed to the general public and therefore pose a serious threat, especially if they are used in targeted attacks against companies or governments.<br /><br />When they are used, there are usually no measures that can block the malware that leverages them, which makes them practically undetectable. That is why they are highly prized among criminals, allowing them, for example, to steal important information from a company or government or, in extreme cases, to attack certain types of critical infrastructure.<br /><br />Common use of exploits<br /><br />Criminals frequently use them to make their threats infect a larger number of computers, and we have seen this in recent years in cases of threats that took advantage of vulnerabilities in Java and Adobe products.<br /><br />One example used on a massive scale to exploit vulnerabilities is the ransomware also known as the "Police Virus". In the successive variants that have appeared since 2011, we have seen how criminals have exploited vulnerabilities in Java and in Windows 2003 systems to infect machines and demand a ransom from users for their stored data - which this malware encrypts so it cannot be recovered.<br /><br />Protection measures<br /><br />And now, knowing what an exploit is and how it works, we can adopt a series of measures to prevent them from being used to infect our systems:<br /><br />-Keep all our applications and systems up to date: knowing that exploits take advantage of security holes, it is vital to close them as soon as possible. That is why an effective update policy is necessary, to avoid leaving a window of time that attackers could exploit.<br /><br />-Mitigate the effects of possible exploits used against us. It may happen that the vendor of the vulnerable system or application has not yet released an update that fixes the problem. In this case, tools such as the Enhanced Mitigation Experience Toolkit (EMET) for Windows can be used. This will help keep your system from being infected until a definitive fix is available.<br /><br />-Have an advanced security solution capable of detecting and blocking exploits designed to take advantage of vulnerabilities in web browsers and PDF readers, among others.<br /><br />Conclusion<br /><br />Exploits are commonplace when we talk about new threats and attacks, so it is important that you keep them in mind and know how to protect yourselves by applying the security measures we have offered in this article. This way, you will minimize the risks and prevent your systems and confidential information from falling into the wrong hands.<br /><br />Source: welivesecurity.com<br />🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
<br />Are exploits the same as malware?<br /><br /><br />The best way to debunk any myth is to start by understanding what we are talking about. We have already written quite a lot about malware, and I am sure that you, as regular readers, already have it clear, but for those with a bad memory it doesn't hurt to recall that when we talk about malicious code we mean all those programs or applications that have been designed to cause some kind of damage on the machine of a user who, by mistake, carelessness or ignorance, runs them on their system.<br /><br />On the other hand there are exploits, which could be defined as programs created specifically to exploit a vulnerability, which is nothing more than trying to take advantage of a flaw in the design or programming of a system or application. When it manages to take advantage of a flaw, whoever uses the exploit seeks to obtain, for example, administrator privileges on the operating system and thereby be able to control it.<br /><br />Categorizing malware and exploits<br /><br />We classify malicious code according to the payload or malicious action it performs, which is how different categories or types arise, such as viruses, worms, trojans or botnets, among many other types.<br /><br />In the case of exploits, we can divide them into different categories according to the vulnerability they take advantage of to gain access to the system. Among these categories we could mention buffer overflow, Cross Site Scripting (XSS), SQL or character injection, among many others.<br /><br />Differences and similarities... but malicious<br /><br />As you can see, there are differences between malicious code and an exploit, although there are surely many more similarities between the two. Although the exploit itself is not malicious, cybercriminals often use it as a component within their malicious code to gain access to a system illegally.<br /><br />Many pieces of malicious code rely on exploits to achieve their goal and take control of the system, although not all of them take advantage of vulnerabilities in the same way. Keep in mind that attackers do not only take advantage of vulnerabilities in systems; they can also use Social Engineering to gain the user's trust and steal their information, this often being the fastest way to achieve their malicious goal.<br /><br />Identifying the threats we may face as technology users will help us achieve a higher level of security for our information. Let us remember that many cybercriminals take advantage of how little many users know about how technology works in order to carry out their attacks. To the extent that we know about these threats and share what we know with the people closest to us, we will reduce the attackers' chances.<br /><br />Source: welivesecurity.com<br />
Very good material, bruja, thanks for sharing.<br /><br />Regards.
Excellent information and super clear.<br />Thank you very much.<br /><br />Saludos cordiales / Best regards,<br />hum4n3xpl01t
hi, thank you very much for the contribution, interesting information for those of us who are just getting started in these topics :)
Thank you very much for clearing up some doubts for me.
Missing the links to the exploits that are made public: Los enlaces son solo para miembros. Registrate o iniciá sesión
thank you very much for the info.... regards
Very good information and above all complete :) :) :) :) :)
Thanks for the explanation ;), regards
Thank you very much for the contribution!