thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Exploit Kit

A toolkit hosted on malicious or compromised websites that automatically probes visitors' browsers for vulnerabilities and delivers malware.

Definition

Exploit kits such as Angler and RIG fingerprint the browser and plug-ins and deliver an exploit for an unpatched flaw, resulting in a drive-by download. They were most prevalent when Flash and Java plug-ins were common. Patching browsers and removing plug-ins sharply reduces their effectiveness.

Example

A user visits a compromised news site that silently redirects to RIG and installs ransomware.

Exam tip

Exploit kits enable drive-by downloads with no user action beyond visiting a page.

Related terms