Attacks and malware

What is Proof of concept?

Working code that demonstrates a vulnerability is real, usually without doing the damage a real attack would.

A proof of concept, or PoC, is code that shows a vulnerability can really be exploited. Researchers publish PoCs to demonstrate impact, and vendors use them to confirm a fix.

Once a PoC is public, the time to mass exploitation shrinks sharply, because attackers can adapt it rather than build an exploit themselves. Public PoC availability is one of the strongest signals that a vulnerability needs patching now.

Where you learn it

See Proof of concept in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free