🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 8 of 8, the most named first.

• String obfuscation via single-byte XOR2 items
• Subdomain discovery2 items
• Supply-chain tampering2 items
• System Network Configuration Discovery2 items
• System prompt extraction2 items
• System prompt leakage2 items
• System prompt leaking/extraction2 items
• System/environment reconnaissance2 items
• systemd persistence2 items
• T1005 Data from Local System2 items
• T1041 Exfiltration Over C2 Channel2 items
• T1059.004 Unix Shell2 items
• T1083 File and Directory Discovery2 items
• T1098.001 Account Manipulation2 items
• T1105 Ingress Tool Transfer2 items
• T1140 Deobfuscate/Decode Files or Information2 items
• T1552.001 Credentials In Files2 items
• T1552.004 Private Keys2 items
• Targeted Kerberoasting2 items
• Telemetry exfiltration2 items
• Threat hunting2 items
• Time-of-check to time-of-use race condition2 items
• Token smuggling2 items
• Token theft and replay2 items
• Token/assertion misuse2 items
• Tool Poisoning Attack2 items
• ToolLeak2 items
• Tournament sampling2 items
• Traffic analysis2 items
• Training recall / memorization2 items
• Training recall / memorization cheating2 items
• Transitive dependency exploitation2 items
• Transitive dependency poisoning2 items
• Trusted publishing2 items
• Typosquatting and brand impersonation2 items
• Unauthenticated agent-execution2 items
• Unauthenticated arbitrary file read2 items
• Unauthenticated SQL injection2 items
• Unauthorized access2 items
• Unchecked return values of set*id family functions2 items
• Unconstrained delegation abuse2 items
• Undercover infiltration2 items
• Unpacking2 items
• Unrestricted file upload2 items
• Unsafe agent trajectory adoption2 items
• Use Alternate Authentication Material2 items
• User enumeration2 items
• Variant analysis2 items
• Vibe hacking2 items
• View tag derivation after KEM2 items
• Virtualization/Sandbox Evasion2 items
• Vulnerability discovery2 items
• Vulnerability scanning2 items
• Weak cryptographic algorithms2 items
• WebSocket brute-force hijacking2 items
• Whois Lookup2 items
• Windows Defender exclusion abuse2 items
• Workspace leakage2 items
• Worm-like propagation2 items
• Wrench attacks2 items
• Zero-click data exfiltration2 items
• Zero-day exploitation of package registry proxy2 items
• Active Directory reconnaissance1 item
• Cache poisoning via forged WP_Post objects1 item
• Hook re-entry via parse_request1 item