Exploitation Basics

Summary

Using a discovered vulnerability to actually gain unauthorized access — the step that moves from 'this system might be vulnerable' to proving impact, always within an authorized lab or engagement.

• 1Exploit a known vulnerability on a deliberately vulnerable practice VM (e.g. Metasploitable).
• 2Learn the difference between a proof-of-concept exploit and a fully weaponized one.
• 3Understand why exploitation should always be the minimum necessary to prove impact in a real engagement.