🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 178 of them. This is page 1 of 2, the most named first.

• Prompt Injection60 items
• Path traversal50 items
• SSRF47 items
• IDOR32 items
• Indirect prompt injection29 items
• Sandbox escape27 items
• Confused deputy20 items
• Integer Overflow18 items
• Use-after-free17 items
• BYOVD15 items
• Command injection9 items
• Pwn Request9 items
• Use of Hard-coded Credentials9 items
• Cross-site scripting8 items
• SQL injection8 items
• Dirty Frag7 items
• Credential theft6 items
• Fragnesia6 items
• Lethal trifecta6 items
• Password spraying6 items
• Phantom Gyp6 items
• BOLA5 items
• Broken access control5 items
• Coordinated disclosure5 items
• Missing Authorization5 items
• Tool poisoning5 items
• Account Takeover4 items
• Authentication bypass4 items
• Copy Fail4 items
• CSRF4 items
• Grover's algorithm4 items
• Improper Neutralization of Input During Web Page Generation4 items
• Incorrect authorization4 items
• Integer Overflow or Wraparound4 items
• Privilege escalation4 items
• TOCTOU4 items
• Abliteration3 items
• Adversary-in-the-middle3 items
• Authorization bypass through user-controlled key3 items
• Blind signing3 items
• Buffer overflow3 items
• Cache poisoning3 items
• Denial of service3 items
• Distillation attack3 items
• DNS rebinding3 items
• GhostApproval3 items
• GitLost3 items
• Intent Redirection3 items
• Kerberoasting3 items
• Local file inclusion3 items
• Log-To-Leak3 items
• NTLM relay3 items
• Open redirect3 items
• Phishing3 items
• Phishing-as-a-service3 items
• PowerShell3 items
• Process hollowing3 items
• Remote code execution3 items
• Social engineering3 items
• Typosquatting3 items
• Arbitrary file upload2 items
• ASLR bypass2 items
• Compromise Software Supply Chain2 items
• Container escape2 items
• Data exfiltration2 items
• DCSync2 items
• Device code phishing2 items
• DLL sideloading2 items
• DNS tunneling2 items
• Exploit Public-Facing Application2 items
• Fault injection2 items
• Gatekeeper bypass2 items
• Golden Ticket2 items
• LLMjacking2 items
• Log poisoning2 items
• Missing Origin Validation in WebSockets2 items
• Monitor evasion2 items
• Out-of-bounds read2 items
• Pass-the-hash2 items
• PoisonedRAG2 items
• Prototype Pollution2 items
• Race Condition2 items
• RCE2 items
• Recon2 items
• Reprompt2 items
• Reverse shell2 items
• Rug Pull2 items
• Script injection2 items
• Session Hijacking2 items
• Session Poisoning2 items
• Supply chain compromise2 items
• Template injection2 items
• Time-of-check Time-of-use Race Condition2 items
• Unsound Spill In Mutual Recursion Bug2 items
• Zerologon2 items
• Adversary-in-the-Middle phishing1 item
• Anti-debugging1 item
• Arbitrary file write1 item
• Authorization bypass1 item
• BFLA1 item