Tags

Browse all tags from writeups, reviews, and articles. Click a tag to see the full index of content.

CVEs

MITRE ATT&CK

T1059.0012 T1003.0011 T1003.0021 T10331 T10461 T1059.0061 T1070.0041 T11051 T1110.0021 T1134.0011 T11351 T1136.0011 T11901 T1437.0011 T15171 T1521.0011 T1636.0041 T16461 T16601

Tools

Techniques

CVE Exploitation15 Password Cracking13 AI Agent Tooling5 LFI5 Password Reuse5 Shell Upgrade5 SQL Injection5 Sudo Exploitation5 Vhost Enumeration5 Lateral Movement4 Command Injection3 SSTI3 Arbitrary File Upload2 Blind XSS2 Brute Force2 Credential Discovery2 Database Enumeration2 Default Credentials2 File Upload Bypass2 Filter Bypass2 Kernel Exploitation2 Network Forensics2 PCAP Analysis2 Pre-Auth RCE2 Protocol Analysis2 SeImpersonate Abuse2 Session Hijacking2 Social Engineering2 Source Code Analysis2 SSRF2 Text Classification2 Timeline Reconstruction2 XSS2 2FA Bypass1 ADCS ESC71 ADCS Exploitation1 Adversarial Attacks1 Adversary Emulation1 AES Decryption1 Agentic Development1 AI in Cybersecurity1 AI Red Teaming1 Algebraic Cryptanalysis1 Android Forensics1 Anomaly Detection1 Ansible Vault Cracking1 API Key Abuse1 APK Decompilation1 APK Reverse Engineering1 Arbitrary File Read1 AS-REP Roasting1 Attack Simulation1 Audio Generation1 Backup Analysis1 Bash Pattern Matching1 Binary Hijacking1 Binary Reversing1 Browser Forensics1 Building Automation Exploitation1 Bytecode Analysis1 Classification1 Cloud Security1 Code Object Extraction1 Compliance and Governance1 Config File Enumeration1 Container Escape1 CRLF Injection1 Cryptography1 Data Governance1 Data Loss Prevention1 Data Poisoning1 Data Protection Impact Assessment1 Data Subject Rights1 DCOM Exploitation1 DCSync1 DeepFool1 Detection Engineering1 Differential Privacy1 Docker Container Escape1 Docker Escape1 Driver Enumeration1 DS_Store Enumeration1 Dynamic Instrumentation1 ElasticNet Attack (EAD)1 Environment Variable Enumeration1 Environment Variable Exploitation1 ETW Tracing1 Event Log Analysis1 Feature Engineering1 Feature Extraction1 FGSM1 Format String Injection1 FTP Enumeration1 Gap Analysis1 GhostScript Exploitation1 Git Clone Exploitation1 Git Enumeration1 Git External Protocol1 Git Repository Abuse1 Git Repository Enumeration1 Gradient Descent1 Grobner Basis1 gRPC Enumeration1 Hardcoded Credentials1 I-FGSM1 ICS Exploitation1 Identity and Access Control1 IDOR1 Image Deblurring1 Image Generation1 ImageMagick LFI1 Impersonation1 Incident Response1 Information Disclosure1 Internal Port Scanning1 IoT and OT Security1 IPv6 Firewall Bypass1 JAR Decompilation1 Java Deserialization1 Joomla Exploitation1 JSMA1 Jupyter Notebook RCE1 JWT Forgery1 Kerberoasting1 LaTeX Injection1 LDAP Enumeration1 Leet Speak Reversal1 LLM Security1 Log4j Exploitation1 M&A Privacy1 Malware1 Malware Detection1 Membership Inference1 Memory Dump Analysis1 Memory Forensics1 Memory Manipulation1 Memory Scanning1 MITM Attack1 Model Extraction1 Model Management1 Model Training1 MSSQL Exploitation1 MSSQL Linked Server Exploitation1 MSSQL RCE1 Naive Bayes1 Natural Language Processing1 Network Security1 Network Security ML1 NFS Enumeration1 NTLM Hash Stealing1 Object Introspection1 PassTheCert1 Password Hash Cracking1 Password Policy Analysis1 Password Spraying1 Path Injection1 PDF Embedding1 PE Analysis1 PGP Signature Exploitation1 PHP CGI Injection1 PHP File Upload Bypass1 Pickle Deserialization1 PLC Interaction1 Plugin Exploitation1 Polynomial System Solving1 Port Scan Detection1 Port Tunneling1 Prefetch Analysis1 Pretext Development1 Privacy by Design1 Privacy Incident Response1 Privacy Program Management1 Privilege Escalation Analysis1 Probabilistic Models1 Process Analysis1 Process Injection1 Process Monitoring1 Project Scaffolding1 Prompt Injection1 Purple Team Exercises1 Python Format String1 Python Import Hijacking1 Redis Socket Abuse1 Regex Bypass1 Registry Forensics1 Related Messages1 Reverse Shell Analysis1 Risk Management1 RSA1 SAM Hash Extraction1 Sandbox Escape1 Security Automation1 Security Operations1 SeDebugPrivilege Abuse1 Sentiment Analysis1 Shadow File Extraction1 Shellbag Analysis1 SMB Enumeration1 SMS Phishing (Smishing)1 SNMP Enumeration1 Solar-PuTTY Decryption1 Spam Detection1 Spec-First Development1 Spring Actuator Abuse1 SQLite Analysis1 SQLite Injection1 SQLite Loadable Extensions1 SSH Key Conversion1 SSH Key Extraction1 Staged Payload Reconstruction1 Sudoers Modification1 SUID Exploitation1 Symlink Abuse1 Template Injection1 Test-Driven Development1 Threat Analysis1 Threat Hunting1 Threat Intelligence1 Traffic Analysis1 Vendor Privacy Assessment1 Video Generation1 ViewState Deserialization1 Vishing1 Visual Studio Build Events1 Visual Studio Exploitation1 Voice Cloning1 Vulnerability Management1 Web Security1 Webshell Upload1 Whitespace Bypass1 Wildcard Exploitation1 Windows Defender Evasion1 Wireless Network Exploitation1 Wireless Security1 Workflow Orchestration1 WPS Attack1 WriteSPN Abuse1 WSL Exploitation1 XMPP Enumeration1 YAML Config Abuse1 YARA Scanning1 ZIP Symlink Attack1

Technologies

SSH31 Python10 Apache9 Nginx8 PHP8 AI Agents6 Active Directory5 Gitea4 MySQL4 SQLite4 Docker3 Java3 ADCS2 Android2 DFIR2 Flask2 Git2 IIS2 KeePass2 MSSQL2 PostgreSQL2 Visual Studio2 .NET1 7-Zip1 AES-ECB1 AI Voice Synthesis1 Apache Derby1 Apache OFBiz1 apport-cli1 ASP.NET1 Binwalk1 Blazor1 Browser DB1 Chamilo LMS1 ClearML1 CLR/.NET Analysis1 ControlNet1 Deepfake Technology1 Discord Webhooks1 Dolibarr1 EDR1 Enlightenment1 ERB1 EVTX1 Express1 Firejail1 Froxlor1 FTP1 Game Hacking1 GhostScript1 Gnuplot1 Grafana1 gRPC1 H2 Database1 hMailServer1 HTTP/HTTPS1 ImageMagick1 Industrial Control Systems1 Intrusion Detection1 Jabber/XMPP1 Joomla1 Jupyter1 Laravel1 Large Language Models1 LaTeX1 LDAP1 LibreOffice1 Log4j1 Machine Learning1 Maltrail1 Metabase1 MFT1 Microsoft SQL Server1 Minecraft1 MITRE ATT&CK1 Multi-modal Generation1 Nagios XI1 Naive Bayes1 NFS1 NLP1 Node.js1 NSL-KDD Dataset1 Openfire1 OpenWrt1 OT Security1 Outlook1 PCAP1 PCAP Format1 Pluck CMS1 Portainer1 PowerShell1 PowerShell Script1 Prefetch1 Process Analysis1 Process Memory1 PWM1 pyLoad1 qpdf1 Random Forest1 Redis1 Registry Hives1 Request Tracker1 Request-Baskets1 Reverse Engineering1 Roundcube1 Ruby1 Rust1 SageMath1 Security Research1 Shell1 SIEM1 SMS Spam Collection1 SNMP1 Spring Boot1 SQLPad1 Stable Diffusion1 Swagger1 TCP Socket Server1 TCP/IP1 TeamCity1 USN Journal1 vm21 WEBrick1 Windows Internals1 Windows Memory Analysis1 WonderCMS1 WPA Supplicant1 WSL1 XAMPP1

Artifacts

PCAP2 Source Code2 Android Disk Image1 appops.xml1 Browser History1 Chrome History1 Database Module1 Embedded Ciphertext1 EVTX1 HTTP Traffic1 MFT1 mmssms.db1 Prefetch1 Registry1 USN Journal1

Capabilities

ETW Kernel Tracing1 Malware Detection1 Memory Extraction1 Network Connections1 Network Forensics1 PE Static Analysis1 Process Analysis1 Process Monitoring1 Security Event Logs1 Service & Driver Enumeration1

CWEs

CWE-1341 CWE-3271

Defense Topics

Call-back Procedures1 Security Awareness Training1 Voice Verification1

Generation Modes

Audio/Music1 Pipelines1 Text-to-Image1 Video1

Security Operations

Incident Response2 Continuous Improvement1 Malware Analysis1 Security Metrics1 SOC Automation1 Threat Hunting1

Supported Protocols

BACnet1 EtherNet/IP1 Modbus1 OPC-UA1 S7comm1

Team Collaboration

Blue Team1 Cross-functional Collaboration1 Red Team1

Threat Categories

AI-Enabled Attacks1 Business Email Compromise1 Emerging Threats1

Use Cases

AI-Assisted Hacking1 Educational1 Security Research1 Vulnerability Discovery1