A technique used to compromise a system; can make use of existing software tools or custom-made software components.