🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 2 of 8, the most named first.

• Data from Local System6 items
• Excessive Agency6 items
• Exfiltration6 items
• GitHub Actions cache poisoning6 items
• Indicator Removal6 items
• NoSQL Injection6 items
• Pass-the-hash6 items
• Race Condition6 items
• Recon6 items
• Red teaming6 items
• Risk-based vulnerability management6 items
• Session Hijacking6 items
• Threat Modeling6 items
• Valid Accounts6 items
• Zero-day exploitation6 items
• Acquire Infrastructure5 items
• Anti-forensic cleanup5 items
• ASLR bypass5 items
• Broken object-level authorization5 items
• Buffer overflow5 items
• Code injection5 items
• Cross-Site Request Forgery5 items
• Defense in depth5 items
• Direct prompt injection5 items
• Distillation attack5 items
• Encrypted exfiltration5 items
• Exfiltration Over C2 Channel5 items
• Exfiltration Over Web Service5 items
• Gatekeeper bypass5 items
• GhostApproval5 items
• Grover's algorithm5 items
• Hardcoded secrets5 items
• HTTP request smuggling5 items
• Improper Neutralization of Input During Web Page Generation5 items
• Incorrect authorization5 items
• JWT attacks5 items
• Local file inclusion5 items
• Mass assignment5 items
• Out-of-bounds read5 items
• Out-of-bounds write5 items
• Penetration testing5 items
• Persistent Memory Poisoning5 items
• Ransomware deployment5 items
• Reconnaissance5 items
• Response Queue Poisoning5 items
• Reward hacking5 items
• RMM abuse5 items
• Sandboxing5 items
• SBOM generation5 items
• Secret exfiltration5 items
• SEO poisoning5 items
• SQLi5 items
• Stage Capabilities5 items
• Subdomain enumeration5 items
• Subdomain takeover5 items
• Supply chain risk5 items
• Supply-chain attacks5 items
• Taint Analysis5 items
• TLS certificate validation bypass5 items
• TOCTOU5 items
• Tool Misuse5 items
• Unauthenticated remote code execution5 items
• XXE5 items
• Account manipulation4 items
• Adversary-in-the-Middle phishing4 items
• Agentjacking4 items
• AI-assisted exploit generation4 items
• AMSI bypass4 items
• Anti-forensic self-deletion4 items
• Arbitrary code execution4 items
• Arbitrary file upload4 items
• Auth bypass4 items
• Blind signing4 items
• Bring Your Own Vulnerable Driver4 items
• Brute Force4 items
• Bulletproof hosting4 items
• CI/CD secret theft4 items
• Cloud Service Discovery4 items
• Compromise Software Supply Chain4 items
• Container escape4 items
• Credential and secret harvesting4 items
• Credential harvesting and exfiltration4 items
• Dangling byte technique4 items
• Data poisoning4 items
• Defense evasion4 items
• Deobfuscate/Decode Files or Information4 items
• Detached background process execution4 items
• Differential analysis4 items
• DNS tunneling4 items
• Double extortion4 items
• Double Free4 items
• Enumeration4 items
• Extortion4 items
• Forensic triage4 items
• GitLost4 items
• Hardcoded credentials4 items
• Improper Authentication4 items
• Inhibit System Recovery4 items
• Injection4 items
• Keylogging4 items