Microsoft® Windows® 2000 Security Handbook

Exploiting the Site

Well, now you have come to perhaps the most controversial part of the chapter. This is the part where I explain the anatomy of an exploit, how it works, and how to use it to gain information or privileges above what you should have. These details are technical in nature, and so I provide a quick overview. For more information, you might want to examine real exploits. These sections give you practical examples of the techniques I describe here.

Possible Severities

Each attack can have one of several possible severities associated with it. It might give an attacker access to information that he shouldn't have or even give him administrative rights on your system.

Sometimes an attacker is strictly looking for information. This ...