🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 803 of them. This is page 5 of 9, the most named first.

• Create or Modify System Process2 items
• Credential and secret exfiltration2 items
• Credential file harvesting2 items
• Credential theft / harvesting2 items
• Cron persistence2 items
• Cross-agent privilege escalation2 items
• Cross-chain swap laundering2 items
• Cross-client response leakage2 items
• Cross-context proxy authentication coercion2 items
• Cross-site WebSocket hijacking2 items
• Cross-tenant IDOR2 items
• Cryptocurrency mixing2 items
• Cryptocurrency wallet draining2 items
• Cryptography attacks2 items
• CSP bypass via SSRF2 items
• CVSS2 items
• CWE-3062 items
• Cyber Communication Channel2 items
• Data exfiltration via agent tool use2 items
• Data from Information Repositories2 items
• DeepJack2 items
• Default credential testing2 items
• Defense evasion via Windows Defender exclusions2 items
• Delayed execution2 items
• Deobfuscation2 items
• Deserialization2 items
• Deserialization of untrusted data2 items
• Destructive fallback2 items
• Detached child process execution2 items
• Develop Capabilities2 items
• Differential fault analysis2 items
• Differential testing2 items
• Direct prompt injection / instruction hierarchy violation2 items
• Disabling security tools2 items
• Discovery2 items
• Distillation attack2 items
• DNS enumeration2 items
• DNS hijacking2 items
• DNS tunneling2 items
• DNS TXT record payload delivery2 items
• Do Anything Now2 items
• Domain Generation Algorithm fallback2 items
• Domain seizure2 items
• Dual-channel exfiltration2 items
• Dual-track incremental scanning2 items
• Dynamic instrumentation2 items
• EDR evasion2 items
• EIP-712 payee delegation2 items
• EIP-7702 delegation sweeper contract2 items
• Elevation of privilege2 items
• Emergent/unpredictable capabilities2 items
• Enterprise Environment Discovery2 items
• Enterprise Resource Discovery2 items
• Establish Accounts2 items
• Eval injection2 items
• Execution on package import2 items
• Exfiltration via GitHub API2 items
• Extraction2 items
• File and Directory Discovery2 items
• File encryption / ransomware deployment2 items
• File upload attacks2 items
• Firmware extraction and emulation2 items
• Flash loan attacks2 items
• Forced pruning2 items
• Formally verified policy changes2 items
• Full control flow hijack2 items
• Fully Homomorphic Encryption2 items
• GhostApproval2 items
• Ghostjacking2 items
• Git dependency .npmrc override of git executable2 items
• Git history rewriting2 items
• Git hook persistence2 items
• GitHub Actions workflow injection2 items
• GitHub dead-drop exfiltration2 items
• Google dorking2 items
• GraphQL2 items
• GraphQL attacks2 items
• Grover search against hash functions2 items
• Hardcoded credential detection2 items
• Hardcoded secret fallback2 items
• Hashing2 items
• Heap exploitation2 items
• Heap grooming2 items
• Heap-based Buffer Overflow2 items
• Helm template injection via GitOps controller2 items
• Hidden context exposure2 items
• HITL Dialog Forging2 items
• HTML rendering race condition2 items
• Image signing and verification2 items
• Impair Defenses2 items
• Implicit intent interception2 items
• Implicit node-gyp rebuild via binding.gyp2 items
• Import-time execution2 items
• Impossible travel detection2 items
• Improper input validation2 items
• Improper sanitization2 items
• Improper verification of cryptographic signature2 items
• In-memory payload execution2 items
• In-memory/fileless execution2 items
• Insecure AI-generated code2 items