🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 763 of them. This is page 1 of 8, the most named first.

• Prompt Injection96 items
• Indirect prompt injection50 items
• SQL injection48 items
• Path traversal37 items
• SSRF37 items
• Cross-site scripting28 items
• Typosquatting28 items
• Privilege escalation27 items
• Supply chain compromise25 items
• Command injection24 items
• Masquerading24 items
• Lateral movement20 items
• Remote code execution20 items
• Slopsquatting18 items
• Web shell deployment18 items
• Denial of service17 items
• IDOR17 items
• Reachability analysis16 items
• Credential harvesting15 items
• Use-after-free15 items
• ClickFix14 items
• Command and Scripting Interpreter14 items
• Device code phishing14 items
• Static Analysis14 items
• Application Layer Protocol13 items
• EtherHiding13 items
• Kerberoasting13 items
• Fuzzing12 items
• Phishing12 items
• Sandbox escape12 items
• Authentication bypass11 items
• DLL sideloading11 items
• Jailbreaking11 items
• Password spraying11 items
• Credential theft10 items
• Data exfiltration10 items
• Dependency confusion10 items
• Obfuscated Files or Information10 items
• Pwn Request10 items
• Scheduled task persistence10 items
• Supply-chain attack10 items
• Tool poisoning10 items
• Credential Dumping9 items
• Information disclosure9 items
• Ingress Tool Transfer9 items
• OS Command Injection9 items
• User Execution9 items
• Vulnerability chaining9 items
• AI-assisted vulnerability discovery8 items
• ClickFix social engineering8 items
• DCSync8 items
• Insecure deserialization8 items
• Persistence8 items
• Prototype Pollution8 items
• Registry Run Key persistence8 items
• System Information Discovery8 items
• Credential Stuffing7 items
• Dynamic analysis7 items
• Exploit chaining7 items
• Function-level reachability analysis7 items
• Harvest now, decrypt later7 items
• Lethal trifecta7 items
• Living off the Land7 items
• Memory poisoning7 items
• Process injection7 items
• Social engineering7 items
• Timestomping7 items
• Unsecured Credentials7 items
• Web Service7 items
• Adversary-in-the-middle6 items
• AI-assisted exploit development6 items
• AS-REP Roasting6 items
• BYOVD6 items
• Confused deputy attack6 items
• Credential exfiltration6 items
• Data from Local System6 items
• Exfiltration6 items
• GitHub Actions cache poisoning6 items
• Indicator Removal6 items
• LLMjacking6 items
• Missing Authorization6 items
• NoSQL Injection6 items
• Open redirect6 items
• Patch diffing6 items
• Red teaming6 items
• Risk-based vulnerability management6 items
• Valid Accounts6 items
• Zero-day exploitation6 items
• Acquire Infrastructure5 items
• Anti-forensic cleanup5 items
• Broken object-level authorization5 items
• Code injection5 items
• Cross-Site Request Forgery5 items
• Defense in depth5 items
• Direct prompt injection5 items
• Encrypted exfiltration5 items
• Excessive Agency5 items
• Exfiltration Over C2 Channel5 items
• Exfiltration Over Web Service5 items
• Exploit Public-Facing Application5 items