Live briefing
Everything about Arbitrary code execution
Cyber attack where any code can be run
In computer security, arbitrary code execution (ACE) is an attacker's ability to run any commands or code of the attacker's choice on a target machine or in a target process. An arbitrary code execution vulnerability is a security flaw in software or hardware allowing arbitrary code execution. A program that is designed to exploit such a vulnerability is called an arbitrary code execution exploit. The ability to trigger arbitrary code execution over a network is often referred to as remote code execution. Wikipedia →
đź§ Start here: a 6-step reading path
- Read the overview: Arbitrary code executionA 5-minute orientation
- Pick up a classic book: Clean CodeThe most-reprinted book on the subject
- Read the landmark paper: Estimates of success rates of remote arbitrary code execution attacksCited 13 times
- Go sideways: Code injectionA closely related topic
- Go sideways: Log4ShellA closely related topic
đź“– Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
📚 Books worth reading
Clean CodeRobert C. Martin · 2008
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
The treatment of prisoners under international lawNigel S. Rodley · 1987
The history of Detroit and MichiganSilas Farmer · 1884
The basics of information securityJason Andress · 2011
Programming Massively Parallel ProcessorsDavid Kirk, Wen-Mei W. Hwu · 2010- 📕The treatment of prisoners under international lawNigel S. Rodley · 2009
A TOUR OF THE WORLDMalik Mansab Khan, Muhammad Rafique Abdul Aziz · 2025
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
đź”— Related topics
- Code injection Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the…
- Log4Shell Log4Shell (CVE-2021-44228) is a vulnerability reported in November 2021 in Log4j, a popular Java logging framework, involving arbitrary code execution…
- Uncontrolled format string Uncontrolled format string is a type of code injection vulnerability discovered around 1989 that can be used in security exploits. Originally thought harmless…
- WinShock WinShock is computer exploit that exploits a vulnerability in the Windows secure channel (SChannel) module and allows for remote code execution. The exploit…
- RouterOS RouterOS is a network operating system based on the Linux kernel developed by MikroTik, pre-installed on RouterBOARD devices. It can also be installed…
- Buffer overflow In programming and information security, a buffer overflow or buffer overrun is a bug whereby a program writes data to a buffer beyond the buffer's allocated…
- Stack buffer overflow In software, a stack buffer overflow or stack buffer overrun occurs when a program writes to a memory address on the program's call stack outside of the…
- Vulnerability management Vulnerability management is the "cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating" software vulnerabilities, which…