Which exploit kit component consists of code that gathers data about a victim’s computer and finds vulnerable applications?

In an exploit kit, the component that consists of code that gathers data about a victim’s computer and finds vulnerable applications is typically known as the “landing page.”

When a victim’s computer is redirected to an exploit kit, the first contact is usually with the landing page. This page is responsible for determining the specifics of the victim’s environment, such as browser type, operating system, installed software, and existing vulnerabilities. Based on this information, the landing page then decides which exploits to deliver to attempt to compromise the system.

The other components mentioned serve different purposes:

• Payload Delivery Page: This would be the page that actually serves the malicious payload after the victim’s system has been assessed and found vulnerable.
• Downloader Page: This might be involved in downloading additional malicious components or payloads, but it does not typically gather data about the victim’s computer.
• Command-and-Control Page: This would be a component of a botnet or other malicious network, used for controlling compromised systems, rather than a part of an exploit kit per se.