an exploit is a code or a particular system instruction that made by an attacker that take the advantage of vulnerable system locally or remotely.for the locaol exploit it needs proir access to the system and it increases and grants system permissions according to the attacker.for remote exploit it does not need any prior access and it will exploit the security of the particular system[5].in the past decade exploit code was the prime evidence of an attack for the security analysts'. Because the attackers who have a less experince or inexperienced use the code with several loop holes. By analysing the code we can understand the technical skill and capabilities of an attacker. in past the exploit codes are developed for finding the errors and bugs in the system or software. Proof of concept is an example for a simple exploit code. The code actually developed for to find the vulnerabilities of the particular system or software and what are loop holes that an attacker can access the system or software. but in the attackers view they develope each code with their vast knowledge and experince for to attack a system and change their system to fullfill their intension instead testing the vulnerabilities of the system. from the functional view an exploit code mainly have three components :
1 :Attack vector
2:Exploitation Technique
3:Exploitation Payload
ATTACK VECTOR attack vector is a path that helps the attacker to get the access to the vulnerable system.the attacker vector can be attach with a software ,an email, or a pop up etc.[6]or it may be a bug in the system or software that can give access to the attackers..for example their was a bug in the microsoft library that implements the secure socket layer protocol .with this bug the attacker can access several tcp ports as well as several microsoft software packages.probably each code will contain one attack