Years of focus on network defense have drastically shrunk traditional attack surfaces. When one avenue becomes too difficult to penetrate, attackers must find new and more sophisticated methods. Client-side attacks have evolved as network defenses have improved. Metasploit includes modules for several built-in client-side exploits that target software commonly installed on computers, such as web browsers, PDF readers, and Microsoft Office applications.
These exploits typically require first bypassing the protective countermeasures a company has by, for example, tricking a user into clicking a malicious link. Suppose ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
