🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 5 of 8, the most named first.

• Browser credential theft2 items
• Browser extension data theft2 items
• Browser history theft2 items
• Bucket squatting2 items
• Buffer Overflow / Out-of-Bounds Write2 items
• Business Logic Abuse2 items
• Business logic testing2 items
• Callback phishing2 items
• CAPEC2 items
• Charset smuggling2 items
• CL.0 desync2 items
• ClickFix social engineering lure2 items
• Clipboard Data2 items
• Command and Control2 items
• Command and control via public services2 items
• Command injection via crafted hostname2 items
• Compromise of a third-party security product2 items
• Compromised maintainer account2 items
• Config file injection2 items
• Configuration drift2 items
• Consent phishing2 items
• Constrained Delegation abuse2 items
• Control flow flattening2 items
• Create or Modify System Process2 items
• Credential and secret exfiltration2 items
• Credential file harvesting2 items
• Credential theft / harvesting2 items
• Cron persistence2 items
• Cross-agent privilege escalation2 items
• Cross-chain swap laundering2 items
• Cross-client response leakage2 items
• Cross-context proxy authentication coercion2 items
• Cross-site WebSocket hijacking2 items
• Cross-tenant IDOR2 items
• Cryptanalysis2 items
• Cryptocurrency wallet draining2 items
• Cryptography attacks2 items
• CSP bypass via SSRF2 items
• CVSS2 items
• CWE-3062 items
• CWE-7982 items
• Cyber Communication Channel2 items
• D3FEND2 items
• DAST2 items
• Data exfiltration via agent tool use2 items
• Data from Information Repositories2 items
• Dead-man's switch2 items
• DeepJack2 items
• Default credential testing2 items
• Defense evasion via Windows Defender exclusions2 items
• Delayed execution2 items
• Denial of wallet2 items
• Deobfuscation2 items
• Deserialization of untrusted data2 items
• Destructive fallback2 items
• Detached child process execution2 items
• Develop Capabilities2 items
• Differential fault analysis2 items
• Differential testing2 items
• Direct prompt injection / instruction hierarchy violation2 items
• Disabling security tools2 items
• Discovery2 items
• DLL2 items
• DNS enumeration2 items
• DNS TXT record payload delivery2 items
• Domain Generation Algorithm fallback2 items
• DPO2 items
• Dual-channel exfiltration2 items
• Dual-track incremental scanning2 items
• Dynamic Application Security Testing2 items
• Dynamic instrumentation2 items
• EDR evasion2 items
• Elevation of privilege2 items
• Emergent/unpredictable capabilities2 items
• Enterprise Environment Discovery2 items
• Enterprise Resource Discovery2 items
• Establish Accounts2 items
• Eval injection2 items
• Execution on package import2 items
• Execution:Runtime/ReverseShell2 items
• Exfiltration via GitHub API2 items
• Extraction2 items
• Fiat–Shamir transform2 items
• File and Directory Discovery2 items
• File encryption / ransomware deployment2 items
• File upload attacks2 items
• Firmware extraction and emulation2 items
• Flash loan attacks2 items
• Forced pruning2 items
• Formally verified policy changes2 items
• Full control flow hijack2 items
• Fully Homomorphic Encryption2 items
• Ghostjacking2 items
• Git dependency .npmrc override of git executable2 items
• Git history rewriting2 items
• Git hook persistence2 items
• GitHub Actions workflow injection2 items
• GitHub dead-drop exfiltration2 items
• Goal Hijacking2 items
• Google dorking2 items