Client-Side Attacks

Attacks that target the user/browser rather than the server: malicious documents, metadata-laden files, and payloads delivered through content the victim opens.

Recon — file metadata with exiftool

Metadata often leaks usernames, software versions, and internal paths that seed further attacks.

$# Dump all metadata (including unknown/duplicate tags)
$exiftool -a -u old.pdf

Delivery techniques

Common OSCP-relevant client-side vectors: weaponized Office/ODT macros, malicious .lnk / library files, HTML applications (HTA), and evil-icon UNC path capture. Host the payload, get the victim to open it, and catch the callback with a listener. Pair with the AV Evasion guide when a signatured payload gets flagged.