Difference between revisions of "Exploit"
From MgmtWiki
m (→Full Title) |
(→Context) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
==Full Title== | ==Full Title== | ||
An [[Exploit]] is a malicious implementation of code that takes advantage of a [[Vulnerability]] in the design or implementation of a solution. | An [[Exploit]] is a malicious implementation of code that takes advantage of a [[Vulnerability]] in the design or implementation of a solution. | ||
| + | ==Context== | ||
| + | # Exploits are part of the standard [[Threat Model]] | ||
| + | # Exploits are, as a rule, reported to the CVE | ||
| + | # As a general rule [[Attacks]] are directed at known exploits, but can include simple exploration of the [[Ecosystem]] looking for an unknown [[Vulnerability]]. | ||
| + | |||
| + | ==Types== | ||
| + | ===Social Engineering=== | ||
| + | |||
| + | * [https://blog.knowbe4.com/uber-security-breach-looks-bad-caused-by-social-engineering Uber security breach 'looks bad', caused by social engineering] reported on 2022-09-15 | ||
| + | |||
| + | ==Solutions== | ||
| + | * See the wiki page on [[Indicators of Compromise]] for definitions of discovery when an [[Exploit]] has succeeded against a target. | ||
==References== | ==References== | ||
[[Category: Glossary]] | [[Category: Glossary]] | ||
| + | [[Category: Exploit]] | ||
Latest revision as of 11:27, 16 September 2022
Full Title
An Exploit is a malicious implementation of code that takes advantage of a Vulnerability in the design or implementation of a solution.
Context
- Exploits are part of the standard Threat Model
- Exploits are, as a rule, reported to the CVE
- As a general rule Attacks are directed at known exploits, but can include simple exploration of the Ecosystem looking for an unknown Vulnerability.
Types
Social Engineering
- Uber security breach 'looks bad', caused by social engineering reported on 2022-09-15
Solutions
- See the wiki page on Indicators of Compromise for definitions of discovery when an Exploit has succeeded against a target.
