🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 7 of 8, the most named first.

• Payload injection2 items
• Permission Escalation2 items
• Persistence via LaunchAgent2 items
• Persistence:Kubernetes/ContainerWithSensitiveMount2 items
• Persistent skill backdoors via poisoned trajectories2 items
• Phishing and social engineering2 items
• Pig butchering2 items
• Plaintext credential storage2 items
• Platform-specific payload delivery2 items
• Post-match filtering2 items
• Post-quantum cryptography2 items
• Postinstall script execution2 items
• Prefiltering2 items
• Privilege escalation and lateral movement2 items
• PrivilegeEscalation:Kubernetes/PrivilegedContainer2 items
• Process memory scraping2 items
• Prompt extraction2 items
• Prompt injection via email2 items
• Prompt injection via planted content2 items
• Prompt injection via tool output2 items
• Prompt injection via tool outputs2 items
• Proof-of-concept exploit development2 items
• Protocol Ruler technique2 items
• pull_request_target misconfiguration2 items
• Purple Team Exercises2 items
• RAG2 items
• Range cache poisoning2 items
• Ransom note deployment2 items
• Ransomware file encryption2 items
• Ransomware-as-a-Service affiliate model2 items
• Rapid multi-chain fund dispersal2 items
• RBAC2 items
• RBAC reconnaissance2 items
• RBF attack2 items
• Reachability-based prioritization2 items
• Redundant exfiltration channels2 items
• Reflected XSS2 items
• Rejection sampling2 items
• Remote access software2 items
• Remote monitoring and management tool abuse2 items
• Remote Services2 items
• Replay attack2 items
• Resource Exhaustion2 items
• Resource-Based Constrained Delegation abuse2 items
• REST API authentication bypass2 items
• REST batch route confusion2 items
• Retrieval Content Crafting2 items
• Reverse shell execution2 items
• RMM tool abuse for persistence and C22 items
• ROP2 items
• Rug Pull Attack2 items
• Sandbagging2 items
• Sandwich attack2 items
• SAST2 items
• Scanning2 items
• Screen Capture2 items
• Screenshot capture2 items
• search-ms URI protocol handler abuse2 items
• SearchLeak2 items
• Second-stage payload delivery2 items
• Secret sharing2 items
• Secure by Default2 items
• Secure by Design2 items
• Secure code generation2 items
• Secure prompting2 items
• Self-correction and adaptive execution2 items
• Self-propagating supply chain worm2 items
• Self-replicating worm propagation2 items
• Semantic indexing2 items
• Sensitive data logging2 items
• Service Control Policies2 items
• Session fixation2 items
• Sextortion2 items
• Shadow AI discovery2 items
• Shared cache leakage across tenants2 items
• Shell injection2 items
• Shellcode development2 items
• Silent error suppression2 items
• Silent failure / error suppression2 items
• Silver Ticket2 items
• Skill and plugin supply-chain attacks2 items
• Skill evolution2 items
• Skill Poisoning2 items
• Slopsquatting of hallucinated package names2 items
• SNARK-based signature aggregation2 items
• Social engineering via fake job interviews2 items
• SOCKS5 hostname null-byte injection2 items
• SOCKS5 proxy tunneling2 items
• Software Extensions2 items
• Source-to-sink data flow tracing2 items
• Specification gaming / goal misalignment2 items
• Spill slot collision across mutual recursion2 items
• SQL injection testing2 items
• SSRF against MCP servers2 items
• Stack-based Buffer Overflow2 items
• Staged payload delivery2 items
• Static PE analysis2 items
• Status-line injection2 items
• Stored cross-site scripting2 items
• STRIDE threat modeling2 items