All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,881–20,904 of 31,696 skills
- T1218.012 VerclsidAdversaries may abuse verclsid.exe to proxy execution of malicious code.Votes: 0GitHub stars: 3,518
- T1218.011 Rundll32Adversaries may abuse rundll32.exe to proxy execution of malicious code.Votes: 0GitHub stars: 3,518
- T1218.010 Regsvr32Adversaries may abuse Regsvr32.exe to proxy execution of malicious code.Votes: 0GitHub stars: 3,518
- T1218.009 RegsvcsregasmAdversaries may abuse Regsvcs and Regasm to proxy execution of code through a trusted Windows utility.Votes: 0GitHub stars: 3,518
- T1218.008 OdbcconfAdversaries may abuse odbcconf.exe to proxy execution of malicious payloads.Votes: 0GitHub stars: 3,518
- T1218.007 MsiexecAdversaries may abuse msiexec.exe to proxy execution of malicious payloads.Votes: 0GitHub stars: 3,518
- T1218.005 MshtaAdversaries may abuse mshta.exe to proxy execution of malicious .hta files and Javascript or VBScript through a trusted Windows utility.Votes: 0GitHub stars: 3,518
- T1218.004 InstallutilAdversaries may use InstallUtil to proxy execution of code through a trusted Windows utility.Votes: 0GitHub stars: 3,518
- T1218.003 CmstpAdversaries may abuse CMSTP to proxy execution of malicious code.Votes: 0GitHub stars: 3,518
- T1218.002 Control PanelAdversaries may abuse control.exe to proxy execution of malicious payloads.Votes: 0GitHub stars: 3,518
- T1218.001 Compiled Html FileAdversaries may abuse Compiled HTML files (.chm) to conceal malicious code.Votes: 0GitHub stars: 3,518
- T1216 System Script Proxy ExecutionAdversaries may use trusted scripts, often signed with certificates, to proxy the execution of malicious files.Votes: 0GitHub stars: 3,518
- T1216.002 SyncappvpublishingserverAdversaries may abuse SyncAppvPublishingServer.vbs to proxy execution of malicious PowerShell commands.Votes: 0GitHub stars: 3,518
- T1216.001 PubprnAdversaries may use PubPrn to proxy execution of malicious remote files.Votes: 0GitHub stars: 3,518
- T1211 Exploitation For Defense EvasionAdversaries may exploit a system or application vulnerability to bypass security features.Votes: 0GitHub stars: 3,518
- T1207 Rogue Domain ControllerAdversaries may register a rogue Domain Controller to enable manipulation of Active Directory data.Votes: 0GitHub stars: 3,518
- T1205 Traffic SignalingAdversaries may use traffic signaling to hide open ports or other malicious functionality used for persistence or command and control.Votes: 0GitHub stars: 3,518
- T1205.002 Socket FiltersAdversaries may attach filters to a network socket to monitor then activate backdoors used for persistence or command and control.Votes: 0GitHub stars: 3,518
- T1205.001 Port KnockingAdversaries may use port knocking to hide open ports used for persistence or command and control.Votes: 0GitHub stars: 3,518
- T1202 Indirect Command ExecutionAdversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.Votes: 0GitHub stars: 3,518
- T1197 Bits JobsAdversaries may abuse BITS jobs to persistently execute code and perform various background tasks.Votes: 0GitHub stars: 3,518
- T1134 Access Token ManipulationAdversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls.Votes: 0GitHub stars: 3,518
- T1134.005 Sid History InjectionAdversaries may use SID-History Injection to escalate privileges and bypass access controls.Votes: 0GitHub stars: 3,518
- T1134.004 Parent Pid SpoofingAdversaries may spoof the parent process identifier (PPID) of a new process to evade process-monitoring defenses or to elevate privileges.Votes: 0GitHub stars: 3,518