0

Would a remote exploit such as ETERNALBLUE work on any target computer over the internet if you targeted the right ip or does it have to be on the same network and what would be examples of a local exploit and a remote (Like is the remote only over a network close to you in your range, while with local you have to have some type of access with the computer?)

1 Answer 1

2

Remote exploits are exploits that you can run on an external machine. Local exploits are exploits that you can run only with access to the machine (f.e. Privilege Escalations).

A remote exploit may be on a host inside an intranet, accessible only by few people, but also inside the internet, accessible by everyone.

7
  • Can you run a remote exploit cross world and or send it cross world without them downloading a file? like how would that work, could you link any articles, because I am currently trying to understand the limits on a remote exploit.
    – Trey
    Commented Jun 27, 2019 at 13:28
  • Like um, does the remote attack have to be over the same network?
    – Trey
    Commented Jun 27, 2019 at 13:50
  • 1
    The network doesn't matter in this term. You in some cases you can and in some cases you can't. You can have a remote exploit in a service on a host in an intranet. Then you need access to the intranet. But as long as you can connect to the hosts network segment, you can use a remote exploit.
    – TheAge
    Commented Jun 27, 2019 at 14:04
  • 1
    Simply put, for a remote exploit the attacking machine must be able to get some network package(s) to the target machine. In most cases this is easier from inside the LAN, but the term "remote" simply doesn't state if it's from the LAN or from outside.
    – Thomas
    Commented Jun 27, 2019 at 14:10
  • So lets say a simple remote SMB like Eternal, Would it be possible to just do it fully over the Intranet or how would you get an exploit that would work over the intranet that would not need you connected to the host's network in the first place, such as a fully cross world exploit. without sending a PDF/EXE and such.
    – Trey
    Commented Jun 27, 2019 at 14:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .