🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 761 of them. This is page 4 of 8, the most named first.

• T1140 Deobfuscate/Decode Files or Information3 items
• Taint tracking3 items
• Tool shadowing3 items
• Training Data Poisoning3 items
• Version sandwiching3 items
• WAF fingerprinting3 items
• Windows Event Log clearing3 items
• .pyc bytecode bypass2 items
• A32 items
• Abuse Elevation Control Mechanism2 items
• Abuse of Windows Scripted Diagnostics framework2 items
• Action-Level Object BOLA2 items
• Active Directory attacks2 items
• Adversarial Examples2 items
• Adversary-in-the-middle phishing relay2 items
• Agent data injection2 items
• AgentBaiting2 items
• AgentBreaker2 items
• Agentic RAG2 items
• AI Attack Adaptation2 items
• AI red-teaming2 items
• AI-assisted malware development2 items
• AI-driven autonomous penetration testing2 items
• Anti-analysis / sandbox evasion2 items
• Anti-debugging2 items
• Anti-forensics2 items
• Anti-forensics / cleanup2 items
• Anti-forensics / log tampering2 items
• Anti-forensics / self-deletion2 items
• Anti-VM / sandbox evasion2 items
• API hashing2 items
• API security testing2 items
• Approval fatigue2 items
• Approval fatigue with fail-open defaults2 items
• Arbitrary file read2 items
• Arbitrary file upload2 items
• Arbitrary file write2 items
• Architectural drift2 items
• Artifact signing and verification2 items
• ASI062 items
• Attack path analysis2 items
• Attack surface mapping2 items
• Attribute-based access control2 items
• Authentication bypass exploitation2 items
• Authorization bypass2 items
• Authorization drift2 items
• AutoDAN2 items
• Automated Exfiltration2 items
• Autonomous vulnerability discovery2 items
• Backporting2 items
• Behavioral watermarking2 items
• Binary diffing2 items
• Black-box testing2 items
• Blind SQL injection2 items
• Blockchain dead drop C22 items
• Blockchain-based C22 items
• Browser credential theft2 items
• Browser extension data theft2 items
• Browser history theft2 items
• Browser-in-the-browser2 items
• Bucket squatting2 items
• Buffer overflow2 items
• Buffer Overflow / Out-of-Bounds Write2 items
• Business Logic Abuse2 items
• Business logic testing2 items
• CAPEC2 items
• Chain-of-thought monitoring2 items
• Charset smuggling2 items
• CL.0 desync2 items
• ClickFix social engineering lure2 items
• Clipboard Data2 items
• Command and Control2 items
• Command and control via public services2 items
• Command injection via crafted hostname2 items
• Compromise of a third-party security product2 items
• Compromise Software Supply Chain2 items
• Compromised maintainer account2 items
• Config file injection2 items
• Configuration drift2 items
• Constrained Delegation abuse2 items
• Container escape2 items
• Copy Fail2 items
• Create or Modify System Process2 items
• Credential and secret exfiltration2 items
• Credential file harvesting2 items
• Credential theft / harvesting2 items
• Cron persistence2 items
• Cross-agent privilege escalation2 items
• Cross-chain swap laundering2 items
• Cross-client response leakage2 items
• Cross-context proxy authentication coercion2 items
• Cross-site WebSocket hijacking2 items
• Cross-tenant IDOR2 items
• Cryptocurrency wallet draining2 items
• Cryptography attacks2 items
• CSP bypass via SSRF2 items
• CVSS2 items
• CWE-3062 items
• Cyber Communication Channel2 items
• Data exfiltration via agent tool use2 items