🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 819 of them. This is page 7 of 9, the most named first.

• Range cache poisoning2 items
• Ransom note deployment2 items
• Ransomware file encryption2 items
• Ransomware-as-a-Service affiliate model2 items
• Rapid multi-chain fund dispersal2 items
• RBAC reconnaissance2 items
• RBF attack2 items
• Reachability-based prioritization2 items
• ReDoS2 items
• Redundant exfiltration channels2 items
• Reflected XSS2 items
• Rehearsal on test wallets2 items
• Remote access software2 items
• Remote code execution via out-of-memory corruption2 items
• Remote code execution via stale global state2 items
• Remote monitoring and management tool abuse2 items
• Remote Services2 items
• Resource Exhaustion2 items
• Resource-Based Constrained Delegation abuse2 items
• Response blocking2 items
• REST API authentication bypass2 items
• REST batch route confusion2 items
• Retrieval Content Crafting2 items
• Reverse shell execution2 items
• RMM tool abuse for persistence and C22 items
• ROP2 items
• RovoBlast2 items
• Rug Pull Attack2 items
• Sandbagging2 items
• Sandwich attack2 items
• Scanning2 items
• Screen Capture2 items
• Screenshot capture2 items
• search-ms URI protocol handler abuse2 items
• Second-stage payload delivery2 items
• Secret sharing2 items
• Secure by Default2 items
• Secure by Design2 items
• Secure code generation2 items
• Secure prompting2 items
• Self-correction and adaptive execution2 items
• Self-propagating supply chain worm2 items
• Self-replicating worm propagation2 items
• Semantic indexing2 items
• Sensitive data logging2 items
• Session fixation2 items
• Sextortion2 items
• Shadow AI discovery2 items
• Shared cache leakage across tenants2 items
• Shell injection2 items
• Shellcode development2 items
• Signed payment comparison2 items
• Silent error suppression2 items
• Silent failure / error suppression2 items
• Skill and plugin supply-chain attacks2 items
• Skill evolution2 items
• Skill Poisoning2 items
• Slopsquatting of hallucinated package names2 items
• SNARK-based signature aggregation2 items
• Social engineering via fake job interviews2 items
• SOCKS5 hostname null-byte injection2 items
• SOCKS5 proxy tunneling2 items
• Software Bill of Materials2 items
• Software Extensions2 items
• Source-to-sink data flow tracing2 items
• Specification gaming / goal misalignment2 items
• Spill slot collision across mutual recursion2 items
• SQL injection testing2 items
• SSRF against MCP servers2 items
• Stablecoin address blacklisting2 items
• Stack-based Buffer Overflow2 items
• Staged payload delivery2 items
• Static PE analysis2 items
• Status-line injection2 items
• Stored cross-site scripting2 items
• STRIDE threat modeling2 items
• String obfuscation via single-byte XOR2 items
• Subdomain discovery2 items
• Summarization-based context compaction2 items
• Symlink following2 items
• System Network Configuration Discovery2 items
• System prompt extraction2 items
• System prompt leakage2 items
• System prompt leaking/extraction2 items
• System/environment reconnaissance2 items
• systemd persistence2 items
• T1005 Data from Local System2 items
• T1041 Exfiltration Over C2 Channel2 items
• T1059.004 Unix Shell2 items
• T1083 File and Directory Discovery2 items
• T1098.001 Account Manipulation2 items
• T1195 Supply Chain Compromise2 items
• T1552.001 Credentials In Files2 items
• T1552.004 Private Keys2 items
• Targeted Kerberoasting2 items
• Telemetry exfiltration2 items
• Template injection2 items
• Threat hunting2 items
• Time-of-check Time-of-use Race Condition2 items
• Token impersonation2 items