Exploit
ELI5 — The Vibe Check
An exploit is the actual tool or technique used to take advantage of a vulnerability. If the vulnerability is the broken lock, the exploit is the specific trick to pick that lock. Hackers write exploits; defenders patch the locks to make the exploits stop working.
Real Talk
An exploit is code or a technique that leverages a vulnerability to cause unintended behavior in a system — typically to gain unauthorized access, escalate privileges, or execute arbitrary code. Exploits can be proof-of-concept (PoC) demos or weaponized tools.
When You'll Hear This
"A proof-of-concept exploit was published for the CVE." / "The pentest found an exploitable misconfiguration."
Related Terms
Bug Bounty
A bug bounty program pays ethical hackers to find security vulnerabilities in your product.
Patch
A patch is a small update that fixes something specific without replacing the whole program.
Penetration Testing
Penetration testing (pentesting) is hiring ethical hackers to try to break into your own systems before the real bad guys do.
Vulnerability
A vulnerability is a weakness in your code or system that a bad guy could exploit. Like a broken lock on a door.
Zero-Day
A zero-day is a vulnerability that nobody knows about yet — except the person who found it. The name means the vendor has had 'zero days' to fix it.