[xdlwilliamz]

How do i use an exploit in attacking victims, like when an exploit detects a vulnerability in a system and exploits it to gain control, what next ?
Does a loader or virus become needful for further exploitation ?

[mothered]

It's not possible to answer your question based on general terms.

There's thousands of exploit attack vectors, and the same with security vulnerabilities.

[hacxx]

My favorite type of exploits are web based exploits. I have tested exploit kits without any real scenario for years. The best i found was when Windows XP
release Service Pack 2.

I have also have seen a good one in a top site using Aardvark Topsites PHP. The user just needed to view the page and a optimized dropper drops, downloading a undetected trojan without memory leakage. Later the exploits kit start targeting Flash and Java and basically this was when exploit kits started hitting the mainstream media.

[sybylroot]

first of all exploits and scanners are two different things, obviously you can implement and scanner into a exploit but it is not the idea, as a experience viral code i can tell that theres too many tipes of exploits, and each one have a "different way of the things", some "craft & hijack packages" others inject packages, others can do MITM attacks, some use NFC/Bluetooh vuln (like EternalBlue,EternalChampion,EternalRomance,etc) but they are too many types to be written in here, first research a little about small things before attemping to use a exploit, most are backdoored, be warned about it

[taylostolo]

How do i use an exploit in attacking victims, like when an exploit detects a vulnerability in a system and exploits it to gain control, what next ?
Does a loader or virus become needful for further exploitation ?

i think i know what you are going for exploits are used to do certain things and are crafted like the program i just pushed on git hub to bypass uac in my case i have powershell scripts that exploit a known vulnerability and ether run a script or start a program to get admin rights like with my program you run it and for the windows 10 side it will give you an admin control panel or the 7 side that will ask you what exe you want to launch as admin they can also be used to force your way into a system eg metasploit and you dont really detect a vulnerability you get as much info as you can and use the info for a crated exploit and after you force your way in then its up to what you want to load personally i dont like dropping anything on the hard disk for some av resistance.

[xdlwilliamz]

first of all exploits and scanners are two different things, obviously you can implement and scanner into a exploit but it is not the idea, as a experience viral code i can tell that theres too many tipes of exploits, and each one have a "different way of the things", some "craft & hijack packages" others inject packages, others can do MITM attacks, some use NFC/Bluetooh vuln (like EternalBlue,EternalChampion,EternalRomance,etc) but they are too many types to be written in here, first research a little about small things before attemping to use a exploit, most are backdoored, be warned about it

Ok thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'em

[sybylroot]

Ok thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'em

You welcome, you can ask me anytime if you have a question.

[xdlwilliamz]

Ok thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'em

You welcome, you can ask me anytime if you have a question.

Lol are you sure about that? cos i ask too many questions 😅
thanks anyway

[sybylroot]

Lol are you sure about that? cos i ask too many questions 😅
thanks anyway

Sure, whats the point of having knowledge if i can't share it? the more knowledge the better tech can improve even exploits dude
Most of my work (hope i will share something here soon if the admin is ok with that) is worth because is a well done work, not for shadowning or obscuring basic knowledge too some one that wants to learn, i know how it feels at the start but if you really like and put effort on it you will be writting good coding/tools/whatever stuff soon.

Remember power is knowledge, and knowledge is freedom.

[xdlwilliamz]

Lol are you sure about that? cos i ask too many questions 😅
thanks anyway

Sure, whats the point of having knowledge if i can't share it? the more knowledge the better tech can improve even exploits dude
Most of my work (hope i will share something here soon if the admin is ok with that) is worth because is a well done work, not for shadowning or obscuring basic knowledge too some one that wants to learn, i know how it feels at the start but if you really like and put effort on it you will be writting good coding/tools/whatever stuff soon.

Remember power is knowledge, and knowledge is freedom.

oh ok, thanks man.
i intend to learn alot and i devote lotta time when possible, it's cool having ppl who wanna share all the know