Attack types

Attack types — how they work, how to defend

176 attack types explained plainly, in Azerbaijani and English — each with how it works, real examples, and a defense checklist.

• ▸0 day0 day attack is a type of attack that exploits a previously unknown vulnerability
• ▸access control bypassAccess control bypass
• ▸account takeoverAccount Takeover is a security vulnerability that allows attackers to gain unauthorized access to users' accounts.
• ▸account takeoversAccount Takeovers is a type of cyber attack where unauthorized individuals gain access to a person's online accounts to obtain sensitive information or financial data.
• ▸ad fraudAd fraud is a malicious activity aimed at generating revenue through illegitimate online ad clicks or impressions.
• ▸adversary-in-the-middleAdversary-in-the-middle attack - a type of attack aimed at intercepting legitimate users' authentication credentials and sessions
• ▸arbitrary code executionArbitrary Code Execution is a security vulnerability that allows an attacker to execute any code on the target system.
• ▸arbitrary file deletionArbitrary File Deletion attack - a type of vulnerability that allows malicious users to delete any file on the server.
• ▸arbitrary file readArbitrary File Read attack - an attacker can read any file on the system by exploiting a security vulnerability.
• ▸arbitrary file uploadArbitrary File Upload attack is a vulnerability that allows uploading malicious files to the server.
• ▸arbitrary file writeArbitrary file write attack - a type of attack where an attacker exploits a vulnerability to write to or create files on a server without authorization.
• ▸argument injectionArgument injection is a type of attack where specifically crafted inputs cause unexpected behavior in software, often leading to security vulnerabilities.
• ▸auth bypassAuthentication Bypass (auth bypass) attack - an attacker circumvents authentication procedures to gain access to a system or perform certain operations, bypassing restrictions.
• ▸authentication bypassAuthentication Bypass is a type of attack that allows attackers to gain unauthorized access to a system by exploiting vulnerabilities in the authentication process.
• ▸authorization bypassAuthorization bypass through user-controlled key is a security vulnerability that allows an attacker to gain unauthorized access to certain resources or functions within a system.
• ▸backdoorA backdoor is a type of malware or code snippet that bypasses security mechanisms to provide unauthorized access to computer systems.
• ▸blind sql injectionBlind SQL Injection is a security vulnerability occurring due to improper neutralization of user inputs in SQL queries.
• ▸botnetA botnet is a network of compromised devices (IoT devices, routers, etc.) controlled by an attacker through malware, allowing for centralized command and control.
• ▸broken access controlBroken Access Control (BAC) is a security vulnerability that occurs when restrictions on accessing resources or functions within a system are not properly defined or enforced.
• ▸broken object level authorizationBroken Object Level Authorization (BOLA) - allows attackers to access and manipulate other users' resources by being authenticated users.
• ▸brute forceA brute force attack is a type of attack where an attacker attempts to gain unauthorized access to a system, particularly entry points (e.g., VPN, SharePoint, OWA), by trying all possible combinations of login credentials (username and password).
• ▸buffer overflowA buffer overflow attack occurs when more data is written to a buffer than it is designed to hold, potentially leading to system compromise or code execution.
• ▸bypassA bypass attack is a type of attack aimed at circumventing security controls or restrictions.
• ▸cache poisoningCache poisoning - a type of attack involving the injection of malicious data into the cache
• ▸clickfixClickFix is an attack technique where victims are instructed to paste-and-run code on their systems to 'fix' a problem or install software.
• ▸code executionCode execution vulnerability allows unauthorized execution of code on a system.
• ▸code injectionCode injection is a vulnerability that allows attackers to inject malicious code into software or systems, potentially leading to unauthorized access or control.
• ▸command injectionCommand injection is a security vulnerability that allows an attacker to inject malicious commands into a system.
• ▸credential attacksCredential attacks are a type of attack aimed at obtaining or testing legitimate user credentials.
• ▸credential exfiltrationCredential exfiltration is a type of security attack where attackers obtain or steal legitimate users' login credentials (typically username and password).
• ▸credential harvestingCredential harvesting is a type of cyber attack where threat actors steal user credentials, typically usernames and passwords.
• ▸credential stuffingCredential stuffing is a type of attack where previously compromised username and password combinations are used to gain unauthorized access to other systems or applications through automated means.
• ▸credential theftCredential theft is a pervasive issue in cybersecurity incidents. Threat actors employ various methods to obtain users' login credentials.
• ▸cross site scriptingCross-Site Scripting (XSS) is a cybersecurity threat that involves injecting malicious scripts into web pages viewed by users.
• ▸cross site scripting (xss)Cross-Site Scripting (XSS) is an attack that allows an attacker to inject malicious scripts into a web page by exploiting a security vulnerability.
• ▸cross-site request forgeryCross-Site Request Forgery (CSRF) - a vulnerability that allows an attacker to perform actions on behalf of a user
• ▸csrfCSRF (Cross-Site Request Forgery) is an attack that exploits a security vulnerability to perform actions on a web application without the user's consent.
• ▸cyber-espionageCyber-espionage attacks are cyber intrusions conducted for the purpose of stealing sensitive information or intelligence gathering.
• ▸cyberattackA cyberattack is an attack aimed at causing harm to computer systems, networks, or data.
• ▸cyberattacksCyberattacks involve attacks on computer systems, networks, or data.
• ▸cyberespionageCyberespionage attacks are sophisticated cyber intrusions aimed at stealing sensitive information or being used for malicious purposes.
• ▸data breachA data breach is the unauthorized extraction or exposure of sensitive data from an organization's information systems.
• ▸data exfiltrationData exfiltration is the unauthorized transfer of sensitive data from a target's network or systems to an attacker's control.
• ▸data exposureData exposure is a type of cybersecurity incident where sensitive information is accessed by unauthorized individuals.
• ▸data leakData leak is a type of cybersecurity incident where sensitive data is accessed or disclosed without authorization.
• ▸data theftData theft attack is a cybersecurity incident aimed at stealing sensitive information from organizations.
• ▸data theft extortionData theft extortion is a type of attack where threat actors steal sensitive data from organizations and then extort them by threatening to disclose the stolen data.
• ▸data-poisoningData-poisoning is a type of attack that involves manipulating or falsifying the data used to train artificial intelligence (AI) models.
• ▸ddosDDoS (Distributed Denial of Service) attack - a type of attack that aims to disrupt a target system or network by sending a large volume of traffic from multiple sources.
• ▸deepfakeDeepfake is the manipulation of original audio or video through artificial intelligence technologies.
• ▸deepfakesDeepfakes are AI-generated fake videos or images.
• ▸denial of serviceDenial of Service (DoS) attack - a type of attack aimed at making a service or system resource inaccessible by overwhelming it.
• ▸deserializationDeserialization attack is a type of attack that exploits the deserialization of untrusted data. This allows an attacker to inject malicious code into a system with a vulnerability.
• ▸deserialization of untrusted dataDeserialization of untrusted data
• ▸directory traversalDirectory traversal attack is a type of attack that allows an attacker to access any file on the server by exploiting a security vulnerability.
• ▸dll hijackingDLL Hijacking is an attack type where an attacker exploits a vulnerability in software to load malicious DLL files.
• ▸dll sideloadingDLL Sideloading is a technique used by attackers to load malicious DLL files by exploiting vulnerabilities in legitimate applications.
• ▸dns rebindingDNS Rebinding attack is a type of attack where malicious websites manipulate DNS responses to gain access to a victim's internal network.
• ▸dosDoS (Denial of Service) attack - a type of attack aimed at making a service or system unavailable by exhausting its resources
• ▸elevation of privilegesElevation of privileges is a type of attack that allows an attacker to increase their privileges in a system by exploiting security vulnerabilities.
• ▸escalation of privilegeEscalation of privilege attack - a type of attack where attackers attempt to gain higher-level access rights.
• ▸espionageEspionage refers to cyber operations aimed at gathering intelligence or stealing sensitive information from governments, organizations, or enterprises.
• ▸exploitAn exploit is a piece of code or technique used to take advantage of a vulnerability in a system or software, allowing attackers to compromise the security.
• ▸exploitationExploitation is an attack type that involves taking advantage of vulnerabilities in systems or networks to gain unauthorized access or influence.
• ▸extortionExtortion attacks are cybercrime activities that involve stealing data from or gaining access to organizations' systems and demanding money.
• ▸fraudFraud is a type of cyber attack aimed at deceiving or manipulating legitimate users to obtain financial assets or sensitive information.
• ▸hackA hack refers to unauthorized access to or actions taken against computer systems, networks, or databases with the intent to cause harm or exploit vulnerabilities.
• ▸hackedHacking - unauthorized access to a system, network, or account
• ▸hackingHacking is a type of cyberattack used to gain unauthorized access to or manipulate computer systems, networks, or databases.
• ▸header injectionHeader Injection attack occurs through the modification or falsification of header information.
• ▸heap buffer overflowHeap buffer overflow is a type of attack where an attacker attempts to write or read data beyond the boundaries of a buffer allocated on the heap memory.
• ▸heap out-of-bounds writeHeap out-of-bounds write vulnerability is a security flaw that occurs when writing to the heap memory area exceeds its allocated bounds.
• ▸heap-based buffer overflowA heap-based buffer overflow attack is a type of attack that exploits a security vulnerability by overflowing the buffer allocated on the heap memory.
• ▸hijackHijack attack is a type of attack that involves exploiting vulnerabilities to hijack active sessions or manipulate devices.
• ▸hijackingHijacking is the unauthorized takeover of control over a transport, device, or system.
• ▸html injectionHTML injection attack is a type of attack that allows injecting malicious HTML code into web applications by exploiting a security vulnerability.
• ▸http request smugglingHTTP Request Smuggling is a security vulnerability that arises from the incorrect processing of HTTP requests between multiple HTTP servers and proxies
• ▸identity theftIdentity theft occurs when an attacker steals a victim's personal data and uses it in their name.
• ▸idorIDOR (Insecure Direct Object Reference) is an attack type that exploits a security vulnerability allowing unauthorized users to directly reference objects (e.g., database records).
• ▸impersonationImpersonation attack is a type of security threat where an attacker pretends to be another person or organization to gain the victim's trust.
• ▸improper access controlImproper Access Control is a security vulnerability that occurs when access to resources or functions within a system is not properly controlled or restricted.
• ▸improper access controlsImproper Access Controls
• ▸improper authenticationImproper Authentication vulnerability allows unauthorized access to a system or its resources.
• ▸improper authorizationImproper Authorization vulnerability allows authenticated users to access certain resources or functions without proper authorization.
• ▸improper input validationImproper Input Validation is a vulnerability that occurs when user inputs are not properly validated, allowing attackers to inject malicious data.
• ▸improper privilege managementImproper Privilege Management vulnerability occurs when unnecessary or excessive permissions are granted to certain users or components in a system.
• ▸improper validation of certificate with host mismatchImproper Validation of Certificate with Host Mismatch vulnerability
• ▸incorrect authorizationIncorrect authorization occurs when access rights to certain resources or functions in a system are not properly defined or enforced.
• ▸indirect prompt injectionIndirect prompt injection - a type of attack used to manipulate AI agents
• ▸information disclosureInformation disclosure attack involves the unauthorized access to sensitive information by exploiting a security vulnerability.
• ▸information exposureInformation exposure is a type of cybersecurity incident where sensitive information is obtained by unauthorized individuals.
• ▸infostealerInfostealer is a type of malware designed to steal sensitive information from victims.
• ▸injectionInjection attack - injecting malicious data into a system by exploiting weak security controls.
• ▸insecure direct object referenceInsecure Direct Object Reference (IDOR) is a type of attack that exploits a security vulnerability, allowing an attacker to gain unauthorized access to sensitive data or objects within a system.
• ▸integer overflowInteger overflow attack is a security vulnerability that occurs when an integer value exceeds its maximum limit in a software.
• ▸ip spoofingIP spoofing - a type of attack where an attacker disguises their IP address to appear as a legitimate user by exploiting a security vulnerability
• ▸jailbreakJailbreak is an attack type aimed at freeing AI or other restricted systems from their security constraints.
• ▸local escalation of privilegeLocal Escalation of Privilege attack is an attempt by a malicious actor to gain higher privilege levels using existing system privileges.
• ▸local file inclusionLocal File Inclusion (LFI) attack - a type of attack that exploits a vulnerability in web applications, allowing attackers to read or execute arbitrary files on the server.
• ▸local privilege escalationLocal Privilege Escalation is a type of attack where an attacker with limited access tries to gain higher privileges on a system.
• ▸malvertisingMalvertising is a type of cyber attack that uses online advertising to spread malware. It involves injecting malicious code into legitimate online ad services.
• ▸malwareMalware is a type of software designed to harm computer systems, steal data, or perform other malicious activities.
• ▸malware deliveryMalware delivery attack is the process of bypassing security measures to deliver malicious software to victim systems.
• ▸man-in-the-middleMan-in-the-middle (MitM) attack is a type of attack where an attacker intercepts and possibly alters the communication between two parties. The attacker can eavesdrop, modify, or steal sensitive information without being detected.
• ▸memory corruptionMemory corruption attack exploits vulnerabilities in software due to improper memory management.
• ▸misconfigurationMisconfiguration - a security vulnerability resulting from incorrect configuration of systems or software
• ▸missing authenticationMissing authentication attack is a type of attack that exploits the lack or improper implementation of authentication mechanisms, allowing unauthorized access to systems or data.
• ▸missing authorizationMissing Authorization vulnerability occurs when the system fails to properly check for necessary permissions to perform certain operations.
• ▸mitmMITM (Man-in-the-Middle) attack - an attack where a malicious actor intercepts or manipulates communication between two parties.
• ▸nosql injectionNoSQL injection is a type of attack targeting NoSQL databases. This attack occurs when an attacker exploits software that fails to properly sanitize or validate user-supplied parameters.
• ▸null pointer dereferenceNull pointer dereference is a security vulnerability that occurs when a program attempts to access or manipulate a null (non-existent) pointer, leading to a system crash or potential code execution.
• ▸open redirectAn open redirect attack is a type of attack that exploits a security vulnerability to redirect users to malicious websites.
• ▸os command injectionOS Command Injection is a type of attack that allows an attacker to execute arbitrary commands on the operating system of a vulnerable server or software by exploiting a security weakness.
• ▸out-of-bounds readOut-of-bounds read attack is a type of vulnerability that allows an attacker to read data outside the allocated memory area of a program.
• ▸out-of-bounds writeOut-of-bounds write is a security vulnerability that allows writing beyond the boundaries of a designated memory area.
• ▸password sprayPassword spray attack is a type of cyber threat where attackers attempt to gain unauthorized access by trying a list of common passwords against multiple user accounts.
• ▸path traversalPath traversal attack is a type of attack that exploits a security vulnerability to access or modify files outside a restricted directory.
• ▸permission bypassPermission bypass attack is a type of attack where an attacker circumvents the established permission restrictions in a system, allowing unauthorized users to perform certain operations.
• ▸phishingPhishing is a type of attack that aims to steal sensitive information by deceiving users through email, messages, or other means.
• ▸php object injectionPHP Object Injection is an attack type that allows the execution of PHP objects due to the deserialization of untrusted input data.
• ▸privilege abusePrivilege abuse attack is a security breach that occurs when users or systems are provided with excessive or unnecessary privileges.
• ▸privilege escalationPrivilege escalation attack is a type of attack where attackers aim to gain higher-level access rights in a system or application.
• ▸prompt-injectionPrompt-injection is a technique used to manipulate AI agents or Large Language Models (LLMs) by embedding hidden instructions or commands that cause the models to perform unexpected or malicious actions.
• ▸prototype pollutionPrototype pollution attack modifies the prototype of an object, leading to security vulnerabilities.
• ▸race conditionA race condition attack exploits a vulnerability related to the timing or sequence of concurrently executed processes.
• ▸ransomRansom attack: a type of attack where attackers encrypt an organization's data and demand a ransom
• ▸ransomwareRansomware is a type of malware that encrypts a victim's data and demands a ransom in exchange for the decryption key.
• ▸ratRAT (Remote Access Trojan) is a type of malware that allows attackers to remotely control compromised devices.
• ▸rceRCE (Remote Code Execution) is a vulnerability that allows an attacker to execute arbitrary code on a system remotely.
• ▸reconnaissanceReconnaissance attack is a method used by threat actors to gather information about target systems.
• ▸reflected cross-site scriptingReflected Cross-Site Scripting (XSS) is a type of attack that occurs when a web application fails to properly sanitize or validate user input, leading to the execution of malicious code.
• ▸relative path traversalRelative Path Traversal is an attack type that exploits a vulnerability, allowing an attacker to write files outside the intended directory.
• ▸remote code executionRemote Code Execution (RCE) is a vulnerability that allows an attacker to execute arbitrary code on a victim system.
• ▸request smugglingRequest smuggling is an attack that exploits vulnerabilities in the processing of multiple HTTP requests over the same TCP connection.
• ▸resource exhaustionResource exhaustion attack - a type of attack aimed at depleting a system's resources and disrupting its ability to provide service.
• ▸sandbox bypassA sandbox bypass attack is a type of attack that allows an attacker to execute operations restricted by a security sandbox.
• ▸sandbox escapeSandbox escape is a type of attack where an attacker exploits a vulnerability to break out of a sandboxed environment and gain access to the underlying system.
• ▸scamScam refers to fraudulent activities designed to deceive individuals into divulging sensitive information or performing certain actions.
• ▸scamsScams are fraudulent activities designed to deceive individuals or organizations for financial or other gains.
• ▸script injectionScript injection is an attack type that involves injecting malicious code for execution.
• ▸security bypassSecurity bypass attack - a type of attack that allows an attacker to bypass security controls and gain unauthorized access or perform certain operations
• ▸server-side request forgeryServer-Side Request Forgery (SSRF) - an attack type that allows an attacker to manipulate a server into making requests to unintended or restricted resources
• ▸server-side template injectionServer-Side Template Injection (SSTI) is a vulnerability that occurs in template processing
• ▸session hijackingSession Hijacking is a type of security attack where an attacker takes control of a user's session, acting on their behalf.
• ▸sextortionSextortion is a type of cyber threat where attackers use victims' personal information or threats made in their name to intimidate and extort money from them.
• ▸shell command injectionShell command injection is a type of attack that allows malicious users to execute arbitrary commands on a system
• ▸social engineeringSocial engineering is an attack type that manipulates human psychology to bypass security systems.
• ▸spear-phishingSpear-phishing is a targeted phishing attack directed at specific organizations or individuals.
• ▸spectreSpectre attack is a type of side-channel attack targeting speculative execution in modern CPUs
• ▸spoofingSpoofing attack is a cybersecurity threat that allows an attacker to impersonate a legitimate source to carry out malicious activities against systems or users.
• ▸spywareSpyware is a type of malicious software designed to secretly gather sensitive information from a victim's device.
• ▸sql injectionSQL Injection - an attack where an attacker injects malicious SQL code into a web application's database in order to extract or modify sensitive data
• ▸ssrfServer-Side Request Forgery (SSRF) - an attack type that allows an attacker to make a vulnerable server perform unintended requests
• ▸stack-based buffer overflowStack-based buffer overflow is a type of memory safety vulnerability that occurs in the stack buffer of a software. This happens when more data is written to the stack than it is allocated to hold, affecting the execution of the program.
• ▸stored cross-site scriptingStored Cross-Site Scripting (XSS)
• ▸stored xssStored XSS attack involves storing malicious JavaScript code in a web application's database, which is then served to users.
• ▸supply-chainA supply-chain attack is a type of cyber attack that targets vulnerabilities in the supply chain to compromise the target systems.
• ▸symlink attackA symlink attack is a type of attack where an attacker attempts to gain access to sensitive files by creating a symbolic link, exploiting a vulnerability in a program's insecure temporary file creation.
• ▸tamperingTampering attack is a cybersecurity threat that involves altering data or systems.
• ▸theftTheft cyberattack involves the unauthorized acquisition of sensitive information or assets from individuals or organizations.
• ▸toctouTOCTOU (Time-of-Check to Time-of-Use) attack - a type of attack that exploits the time difference between checking and using the state of a system component
• ▸token theftToken theft attack is when attackers steal user authentication tokens to gain unauthorized access to systems.
• ▸trojanA Trojan is a type of malware that disguises itself as legitimate software to gain access to a system and perform malicious activities covertly.
• ▸type confusionType Confusion attack is a vulnerability that occurs when data of an unexpected type is used in software, leading to unexpected behavior.
• ▸typosquattingTyposquatting is an attack type that targets developers by exploiting their typos when installing packages, leading to the download of malicious software.
• ▸uafUAF (Use-After-Free) attack exploits a security vulnerability by accessing a previously freed memory area.
• ▸unauthorized accessUnauthorized access vulnerability allows unauthenticated or low-privileged users to access restricted data or functions.
• ▸unrestricted file uploadUnrestricted file upload attack
• ▸unrestricted uploadUnrestricted file upload is a type of attack that allows an attacker to upload any file to a server by exploiting a security vulnerability.
• ▸use-after-freeUse-after-free (UAF) - a type of attack that involves accessing memory after it has been freed
• ▸vishingVishing is a type of social engineering attack where threat actors deceive individuals over the phone to obtain sensitive information or gain unauthorized access.
• ▸vulnerabilityA vulnerability attack is a type of attack that exploits a security weakness in a particular system or software to gain unauthorized access or compromise the security of the system.
• ▸xssXSS (Cross-Site Scripting) attack is a security vulnerability in web applications where malicious scripts are executed by other users.
• ▸xxeXXE (XML External Entity) attack is a security vulnerability occurring during the processing of XML documents. This type of attack can lead to the exposure of sensitive information when XML parsers process external entities.
• ▸zero-clickA zero-click attack is a type of cyberattack that occurs without requiring any action from the user.
• ▸zero-dayA zero-day attack is a type of cyber attack that exploits a previously unknown vulnerability in a computer system or application.

176 guides · part of skopnix — global cyber-threat intelligence.