CyberCode Academy

Course 34 - Cybersecurity Kill Chain | Episode 3: Delivery, Exploitation, and Installation

Listen Later
In this lesson, you’ll learn about: Delivery, Exploitation, and Installation in the Cyber Kill Chain1. Delivery Phase (Getting the Payload to the Target)🔹 Definition
  • The process of transferring the malicious payload to the victim
🔹 Common Delivery Methods📡 Technical Methods
  • Using exposed services:
    • FTP uploads
    • Web downloads
💾 Physical Methods
  • Infected USB drives left in:
    • Offices
    • Public places
🎭 Social Engineering (Most Effective)
  • Tool:
    • Social Engineering Toolkit (SET)
  • Used for:
    • Spear-phishing campaigns
    • Mass phishing emails
👉 Key idea:
  • Trick the user into executing the payload themselves
2. Exploitation Phase (Triggering the Attack)🔹 Definition
  • The moment the payload:
    • executes successfully
    • bypasses security controls
🔹 How Exploitation Happens
  • Exploiting:
    • Software vulnerabilities
    • Misconfigurations
🔹 Most Common Weakness👉 Human behavior
  • Clicking malicious links
  • Entering credentials on fake pages
3. Installation Phase (Maintaining Access)🔹 Definition
  • Establishing a persistent foothold on the system
🔹 Goal
  • Ensure attacker can:
    • Reconnect anytime
    • Maintain control
🔹 Common Concept
  • Installing:
    • Backdoors
    • Persistent malware
🔹 Tool Example
  • Metasploit
  • Used to:
    • Set up a listener
    • Wait for incoming connection from victim
👉 Once connected:
  • A session is opened
  • Attacker gains remote control
4. Exploitation vs Installation (Key Difference)PhasePurposeResultExploitationBreak into the systemInitial accessInstallationStay inside the systemPersistent access5. Full Flow Understanding
  • Delivery
    • Gets payload to victim
  • Exploitation
    • Executes payload successfully
  • Installation
    • Keeps long-term access
Key Takeaways
  • Delivery relies heavily on social engineering
  • Exploitation is about triggering execution
  • Installation ensures persistence
  • Humans are often the weakest link
  • Tools automate the process, but logic remains consistent
Big PictureThese phases represent:👉 From sending the attack → to owning the system
  • Delivery = Entry point
  • Exploitation = Break-in
  • Installation = Persistence
Mental ModelThink of it like:
  • Delivery → “Send the package”
  • Exploitation → “Open the door”
  • Installation → “Stay inside the house”


You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy