Exploits

Slide 1: 

EXPLOITS Module Number 12

Slide 2: 

Exploits : Intro In computing an exploit is usually a software bug that can be exploited by means of programming by taking advantage of the vulnerability found on that particular software and create unexpected results that are not intended by the developers. Hackers will hack into an application by spawning exploits against its vulnerability for taking control over the whole system. Exploits is a piece of software program that is used to compromise the software security and this is purely developed by black hat hackers.

Slide 3: 

Exploit DB The recommended Exploit Databases are, www.milw0rm.com www.securiteam.com/exploits www.securityfocus.com www.secunia.com www.packetstormsecurity.org

Slide 4: 

Zero Day Exploits In the field of hacking and Security, Zero Day or 0day actually refers to the exploit that is recently found and released on the internet, in other words you can say that a Zero day exploit is a brand new exploit since it has not even passed a day from the day it was discovered.

Slide 5: 

Zero Day Exploits Hacker takes pride to launch a big attack on various servers when a 0day exploit is posted or released in the wild. If exploit code is very simple and easy to use, then script kiddies too may take part in the launch of an attack. When a new application or software is released online, the hackers and cracker will wait for the countdown to start downloading, analyze and experiment the software in various other aspects and write exploit codes for the software and test whether they behave in odd manner that causes security breach and then will share the exploit with other hackers and start exploiting to launch a massive attack.

Slide 6: 

Metasploit Project Metasploit Framework is a wet dream for Script kiddies, since it contains all the latest exploit databases embedded in it and all you need to do is just to select the exploit, payload, specify the target either by its IP address or by hostname, remote port and local port to connect back and a final “ENTER” to launch the exploit against the target.

Slide 7: 

Metasploit Project Metasploit Framework is an open source penetration testing tool that was developed by H.D. Moore using the ruby programming language that offers a light weight application. Metasploit Framework can be used both by the security people for penetration testing and also by crackers who wants to break into computers. I would suggest Metasploit Framework to be the best fit tool for penetration testers.

Slide 8: 

Metasploit Project Available on both CLI and GUI mode.

Slide 9: 

Milw0rm Milw0rm is the website run by hackers and security experts that contain tons of exploit databases. Milw0rm doesn’t only share exploit codes but also contains video tutorials for both cracking and securing applications, Shell codes and online password crackers.