Exploit kits are automated tools used by cybercriminals to identify and exploit vulnerabilities in software, allowing them to deliver malware to unsuspecting users. These kits are often sold or rented on the dark web, making sophisticated cyber attacks accessible to less technically skilled attackers.