🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 1 of 8, the most named first.

• Prompt Injection155 items
• Path traversal87 items
• SSRF84 items
• Indirect prompt injection79 items
• SQL injection56 items
• IDOR49 items
• Sandbox escape39 items
• Cross-site scripting36 items
• Command injection33 items
• Use-after-free32 items
• Privilege escalation31 items
• Typosquatting31 items
• Supply chain compromise27 items
• Confused deputy24 items
• Masquerading24 items
• Remote code execution23 items
• Integer Overflow22 items
• BYOVD21 items
• Lateral movement21 items
• Denial of service20 items
• Pwn Request19 items
• Slopsquatting18 items
• Web shell deployment18 items
• Password spraying17 items
• Credential theft16 items
• Device code phishing16 items
• Kerberoasting16 items
• Reachability analysis16 items
• Authentication bypass15 items
• Credential harvesting15 items
• Phishing15 items
• Tool poisoning15 items
• ClickFix14 items
• Command and Scripting Interpreter14 items
• Static Analysis14 items
• Application Layer Protocol13 items
• DLL sideloading13 items
• EtherHiding13 items
• Lethal trifecta13 items
• Data exfiltration12 items
• Fuzzing12 items
• Jailbreaking11 items
• Missing Authorization11 items
• DCSync10 items
• Dependency confusion10 items
• Dirty Frag10 items
• Obfuscated Files or Information10 items
• Prototype Pollution10 items
• Scheduled task persistence10 items
• Social engineering10 items
• Supply-chain attack10 items
• Use of Hard-coded Credentials10 items
• Adversary-in-the-middle9 items
• Broken access control9 items
• Coordinated disclosure9 items
• Credential Dumping9 items
• Information disclosure9 items
• Ingress Tool Transfer9 items
• Open redirect9 items
• OS Command Injection9 items
• User Execution9 items
• Vulnerability chaining9 items
• AI-assisted vulnerability discovery8 items
• BOLA8 items
• ClickFix social engineering8 items
• Credential Stuffing8 items
• Insecure deserialization8 items
• Integer Overflow or Wraparound8 items
• Intent Redirection8 items
• LLMjacking8 items
• Memory poisoning8 items
• Persistence8 items
• Phantom Gyp8 items
• Registry Run Key persistence8 items
• System Information Discovery8 items
• Abliteration7 items
• Cache poisoning7 items
• Credential exfiltration7 items
• CSRF7 items
• DNS rebinding7 items
• Dynamic analysis7 items
• Exploit chaining7 items
• Exploit Public-Facing Application7 items
• Fragnesia7 items
• Function-level reachability analysis7 items
• Harvest now, decrypt later7 items
• Living off the Land7 items
• Patch diffing7 items
• Process hollowing7 items
• Process injection7 items
• Reverse shell7 items
• Timestomping7 items
• Unsecured Credentials7 items
• Web Service7 items
• Account Takeover6 items
• AI-assisted exploit development6 items
• AS-REP Roasting6 items
• Authorization bypass through user-controlled key6 items
• Confused deputy attack6 items
• Copy Fail6 items