Dictionary · Cybersecurity Fundamentals
Exploit
Risk · Intermediate
A method or piece of software that uses a weakness to produce an effect the owner did not intend. Studying the word does not require building one.
If a vulnerability is the weakness, this is the way it gets used. Defenders track public reports so they can patch or mitigate before someone tries.
Example: A vendor advisory says a flaw is being exploited in the wild, which means real attackers have a working method and the patch should be hurried.
Common misconception
- The word can mean the technique or a working instance. Neither meaning makes it safe or legal to try it on a system you do not own.