🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 836 of them. This is page 8 of 9, the most named first.

• System/environment reconnaissance2 items
• systemd persistence2 items
• T1005 Data from Local System2 items
• T1041 Exfiltration Over C2 Channel2 items
• T1059.004 Unix Shell2 items
• T1083 File and Directory Discovery2 items
• T1098.001 Account Manipulation2 items
• T1195 Supply Chain Compromise2 items
• T1552.001 Credentials In Files2 items
• T1552.004 Private Keys2 items
• Targeted Kerberoasting2 items
• Telemetry exfiltration2 items
• Template injection2 items
• Threat hunting2 items
• Time-of-check Time-of-use Race Condition2 items
• Token impersonation2 items
• Token smuggling2 items
• Token theft and replay2 items
• Token/assertion misuse2 items
• Tool Poisoning Attack2 items
• ToolLeak2 items
• Tournament sampling2 items
• Training recall / memorization2 items
• Training recall / memorization cheating2 items
• Transitive dependency exploitation2 items
• Transitive dependency poisoning2 items
• Type confusion2 items
• Typosquatting and brand impersonation2 items
• Unauthenticated agent-execution2 items
• Unauthenticated arbitrary file read2 items
• Unauthenticated SQL injection2 items
• Unauthorized access2 items
• Unauthorized withdrawal submission2 items
• Unchecked return values of set*id family functions2 items
• Unconstrained delegation abuse2 items
• Undercover infiltration2 items
• Unpacking2 items
• Unsafe agent trajectory adoption2 items
• Use Alternate Authentication Material2 items
• Variant analysis2 items
• VEX2 items
• View tag derivation after KEM2 items
• Virtual patching2 items
• Virtualization/Sandbox Evasion2 items
• Vulnerability analysis and validation2 items
• Vulnerability discovery2 items
• Vulnerability prioritization2 items
• Vulnerability scanning2 items
• WAF Bypass2 items
• Wallet sweeping2 items
• Weak cryptographic algorithms2 items
• WebSocket brute-force hijacking2 items
• Whois Lookup2 items
• Windows Defender exclusion abuse2 items
• Worker pinning2 items
• Workspace leakage2 items
• Worm-like propagation2 items
• Zero-click data exfiltration2 items
• Zero-day exploitation of package registry proxy2 items
• Zero-knowledge proofs2 items
• ASI021 item
• AutoJack1 item
• Blind signing1 item
• Branch protection bypass1 item
• Cache poisoning via forged WP_Post objects1 item
• Callback phishing1 item
• Consent phishing1 item
• ConsentFix1 item
• Control flow flattening1 item
• Crescendo1 item
• D3FEND1 item
• Dead-man's switch1 item
• Denial of wallet1 item
• Distillation1 item
• DLL1 item
• DOM-based XSS1 item
• DPO1 item
• Execution:Runtime/ReverseShell1 item
• External Attack Surface Management1 item
• Fault injection1 item
• Fiat–Shamir transform1 item
• Fragnesia1 item
• GitLost1 item
• GitSpawn1 item
• Golden Ticket1 item
• Grover's algorithm1 item
• Harvest now, forge later1 item
• Hook re-entry via parse_request1 item
• HTTP desync attacks1 item
• Human-in-the-Loop Bypass1 item
• IaC scanning1 item
• Improper Neutralization of Input During Web Page Generation1 item
• Incorrect authorization1 item
• Java deserialization1 item
• Jinja2 Server-Side Template Injection1 item
• Laptop farms1 item
• Learning With Errors1 item
• Linear cryptanalysis1 item
• Log poisoning1 item
• Log-To-Leak1 item