Common Weak Spots

SECTION 8

What Is a Vulnerability?

A vulnerability is a weak spot in a system. A crack in the armor.

Hackers don't look at systems the way normal people do. Where a regular user sees a website, a login form, a router. Hacker sees potential:

• That login form? Maybe the inputs aren't filtered.
• That exposed service? Maybe it's running outdated software.
• That "hidden" admin page? Maybe there's no access control.

Vulnerabilities rarely exist alone. The real damage happens when you combine weak spots, stacking small mistakes into full compromise.

Every vulnerability type has a question or a thing where it occurs. When you know where they occur, you know where to focus your energy. This is mostly true with common vulnerabilities, that happen a lot.

What Looks Innocent to Others — Looks Valuable to You

• Version numbers → fingerprinting targets.
• Login forms → injection opportunities.
• Open ports → exposed services.
• Default creds → free access.
• Error messages → information leakage.

A hacker sees systems like puzzle pieces. The trick is spotting how they fit together. Any kind of information about the system is valuable. The better you can identify the system, the wider attack surface you have. This helps you in the initial weak spot stage.

This is why the understanding of all systems is so important. In the beginning, you might not understand the system, but you can still look for vulnerabilities. You can look for things that look out of place, or things that look like they could be vulnerable.