🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 818 of them. This is page 6 of 9, the most named first.

• Install-time script execution2 items
• Integer truncation2 items
• IOC enrichment2 items
• Jailbreak2 items
• JavaScript2 items
• JavaScript obfuscation2 items
• kASLR bypass2 items
• Kerberos delegation abuse2 items
• Kernel exploitation2 items
• Kernel-level enforcement2 items
• Lateral movement via poor segmentation2 items
• Laundering of stolen funds2 items
• LDAP injection2 items
• Living off Trusted Sites2 items
• Living-off-the-land techniques2 items
• LLM API poisoning detection2 items
• LLM Jailbreak2 items
• LLM Prompt Crafting2 items
• LLM Prompt Injection2 items
• Long-horizon agentic engineering2 items
• LoRA fine-tuning2 items
• LSASS dumping2 items
• Malicious Groovy plugin deployment2 items
• Malicious package publishing2 items
• Malicious preinstall script2 items
• Malvertising2 items
• Malvertising via sponsored search results2 items
• Malware reverse engineering2 items
• Manipulation of automatic quality metrics2 items
• Markdown exfiltration2 items
• Match Legitimate Name or Location2 items
• MCP command injection2 items
• MCP Configuration Poisoning2 items
• MCP tool abuse2 items
• Membership inference attack2 items
• Memorization detection2 items
• Memory zeroization2 items
• Memory-safety flaws2 items
• Merkle proofs of prestate2 items
• Micro-inspiration prompting2 items
• Misinformation2 items
• Missing authentication for a critical function2 items
• MITRE ATT&CK mapping2 items
• MITRE ATT&CK technique mapping2 items
• Model checking2 items
• Model Inversion2 items
• Multi-agent orchestration2 items
• Multi-chain simultaneous draining2 items
• Multi-channel exfiltration2 items
• Multi-factor authentication bypass2 items
• Multi-hop redirect chains2 items
• Multi-layer JavaScript obfuscation2 items
• Multi-layer obfuscation2 items
• Multi-node consensus on state root2 items
• Multi-turn jailbreak attacks2 items
• Mutation testing2 items
• Mutex-based execution marker2 items
• Network reconnaissance2 items
• Network segmentation with firewalls2 items
• npm supply chain compromise2 items
• ntdll.dll unhooking2 items
• NTLM relay attack2 items
• Null-pointer dereference2 items
• OAuth consent phishing2 items
• OAuth token theft2 items
• Obfuscated payload2 items
• Onchain fund tracing2 items
• Out-of-band data exfiltration2 items
• Over-optimisation2 items
• Package hallucination attack2 items
• Parameter mining2 items
• Password spraying and OAuth application abuse2 items
• Payload execution2 items
• Payload injection2 items
• Permission Escalation2 items
• Persistence via LaunchAgent2 items
• Persistent skill backdoors via poisoned trajectories2 items
• Phantom Gyp2 items
• Phishing and social engineering2 items
• Plaintext credential storage2 items
• Platform-specific payload delivery2 items
• Post-match filtering2 items
• Postinstall script execution2 items
• Prefiltering2 items
• Principle of Least Privilege2 items
• Privilege escalation and lateral movement2 items
• Process memory scraping2 items
• Prompt extraction2 items
• Prompt injection via email2 items
• Prompt injection via planted content2 items
• Prompt injection via tool output2 items
• Prompt injection via tool outputs2 items
• Proof-of-concept exploit development2 items
• Protocol Ruler technique2 items
• pull_request_target misconfiguration2 items
• Purple Team Exercises2 items
• RAG2 items
• RAG poisoning2 items
• Range cache poisoning2 items
• Ransom note deployment2 items