Assuming an attacker does not have access to your LAN\Router etc... How could they take control of your web cam\system peripherals\other resources via a flash vulnerability. That's what I hear on the news, and I would like to be made familiar of the methods used.
I can possibly see it happening if the webserver\web master wants to attack you, as he would have your ip address and other identifying information and I guess go from there. But how would an attacker that doesn't have access to the webserver launch a lateral attack on the user's of that site? And how are flash's vulnerabilities leveraged?
BONUS:Finally, bonus question, for pentesting I hear that we have to use a sniffer like nmap to scan for vulnerabilities on particular ports\services on a host on a network. I guess those vulns are previously discovered and written down on some database on the web. But my question is: once we have a target computer, how do tools like metasploit work? does the attacking computer create a particular packet that we know the target computer will handle in a self-defeating manner?
I am new to all this, so excuse my ignorance.
