154 Cyber seCurity essentiAls
the necessary information. If the exploit tool determines that the cli-
ent is not vulnerable, it may redirect him or her to a benign URL or
display an empty page. Attackers can also configure tools to check the
language of the victim’s browser and the victim’s geographic location,
or if the victims arrived at the exploit tool through a valid source.
Exploit tools analyze the referrer HTTP header to determine if the
victim originates from an infected page. In this way, exploit tools
avoid sending malicious content to researchers who may use search
engines or other mechanisms to analyze a website.
3.1.8.2 Commercial Web Exploit Tools and Services ere are a large
variety of commercial Web exploit tools and ...