Active or Mobile Code

• Code that is pushed to the client or activated by the client

  • Javascript, ActiveX, JAVA, macros

• Cookies: contain information (but aren't really active.) information could be useful for allowing masquerading or as recon.

• Scripts: CGI, Perl, PHP, JSP, ASP other server-side abilities.