All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,737–20,760 of 31,696 skills
- T1558.005 Ccache FilesAdversaries may attempt to steal Kerberos tickets stored in credential cache files (or ccache).Votes: 0GitHub stars: 3,518
- T1558.004 As Rep RoastingAdversaries may reveal credentials of accounts that have disabled Kerberos preauthentication by Password Cracking Kerberos messages.Votes: 0GitHub stars: 3,518
- T1558.003 KerberoastingAdversaries may abuse a valid Kerberos ticket-granting ticket (TGT) or sniff network traffic to obtain a ticket-granting service (TGS) ticket that may be vulnerable to Brute Force.Votes: 0GitHub stars: 3,518
- T1558.002 Silver TicketAdversaries who have the password hash of a target service account (e.g.Votes: 0GitHub stars: 3,518
- T1558.001 Golden TicketAdversaries who have the KRBTGT account password hash may forge Kerberos ticket-granting tickets (TGT), also known as a golden ticket.Votes: 0GitHub stars: 3,518
- T1557 Adversary In The MiddleAdversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as Network Sniffing, Trans...Votes: 0GitHub stars: 3,518
- T1557.004 Evil TwinAdversaries may host seemingly genuine Wi-Fi access points to deceive users into connecting to malicious networks as a way of supporting follow-on behaviors such as Network Sniffing, Transmitted Da...Votes: 0GitHub stars: 3,518
- T1557.003 Dhcp SpoofingAdversaries may redirect network traffic to adversary-owned systems by spoofing Dynamic Host Configuration Protocol (DHCP) traffic and acting as a malicious DHCP server on the victim network.Votes: 0GitHub stars: 3,518
- T1557.002 Arp Cache PoisoningAdversaries may poison Address Resolution Protocol (ARP) caches to position themselves between the communication of two or more networked devices.Votes: 0GitHub stars: 3,518
- T1556 Modify Authentication ProcessAdversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts.Votes: 0GitHub stars: 3,518
- T1556.009 Conditional Access PoliciesAdversaries may disable or modify conditional access policies to enable persistent access to compromised accounts.Votes: 0GitHub stars: 3,518
- T1556.008 Network Provider DllAdversaries may register malicious network provider dynamic link libraries (DLLs) to capture cleartext user credentials during the authentication process.Votes: 0GitHub stars: 3,518
- T1556.007 Hybrid IdentityAdversaries may patch, modify, or otherwise backdoor cloud authentication processes that are tied to on-premises user identities in order to bypass typical authentication mechanisms, access credent...Votes: 0GitHub stars: 3,518
- T1556.006 Multi Factor AuthenticationAdversaries may disable or modify multi-factor authentication (MFA) mechanisms to enable persistent access to compromised accounts.Votes: 0GitHub stars: 3,518
- T1556.005 Reversible EncryptionAn adversary may abuse Active Directory authentication encryption properties to gain access to credentials on Windows systems.Votes: 0GitHub stars: 3,518
- T1556.004 Network Device AuthenticationAdversaries may use Patch System Image to hard code a password in the operating system, thus bypassing of native authentication mechanisms for local accounts on network devices.Votes: 0GitHub stars: 3,518
- T1556.002 Password Filter DllAdversaries may register malicious password filter dynamic link libraries (DLLs) into the authentication process to acquire user credentials as they are validated.Votes: 0GitHub stars: 3,518
- T1555 Credentials From Password StoresAdversaries may search for common password storage locations to obtain user credentials.Votes: 0GitHub stars: 3,518
- T1555.005 Password ManagersAdversaries may acquire user credentials from third-party password managers.Votes: 0GitHub stars: 3,518
- T1555.004 Windows Credential ManagerAdversaries may acquire credentials from the Windows Credential Manager.Votes: 0GitHub stars: 3,518
- T1555.003 Credentials From Web BrowsersAdversaries may acquire credentials from web browsers by reading files specific to the target browser.Votes: 0GitHub stars: 3,518
- T1555.002 Securityd MemoryAn adversary with root access may gather credentials by reading `securityd`’s memory.Votes: 0GitHub stars: 3,518
- T1555.001 KeychainAdversaries may acquire credentials from Keychain.Votes: 0GitHub stars: 3,518
- T1552 Unsecured CredentialsAdversaries may search compromised systems to find and obtain insecurely stored credentials.Votes: 0GitHub stars: 3,518