All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,977–21,000 of 31,696 skills
- T1068 Exploitation For PrivilegeAdversaries may exploit software vulnerabilities in an attempt to elevate privileges.Votes: 0GitHub stars: 3,518
- T1611 Escape To HostAdversaries may break out of a container or virtualized environment to gain access to the underlying host.Votes: 0GitHub stars: 3,518
- T1548 Abuse Elevation Control MechanismAdversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions.Votes: 0GitHub stars: 3,518
- T1548.004 Elevated Execution With PromptAdversaries may leverage the <code>AuthorizationExecuteWithPrivileges</code> API to escalate privileges by prompting the user for credentials.Votes: 0GitHub stars: 3,518
- T1548.003 Sudo And Sudo CachingAdversaries may perform sudo caching and/or use the sudoers file to elevate privileges.Votes: 0GitHub stars: 3,518
- T1548.002 Bypass User Account ControlAdversaries may bypass UAC mechanisms to elevate process privileges on system.Votes: 0GitHub stars: 3,518
- T1548.001 Setuid And SetgidAn adversary may abuse configurations where an application has the setuid or setgid bits set in order to get code running in a different (and possibly more privileged) user’s context.Votes: 0GitHub stars: 3,518
- T1546 Event Triggered ExecutionAdversaries may establish persistence and/or elevate privileges using system mechanisms that trigger execution based on specific events.Votes: 0GitHub stars: 3,518
- T1546.016 Installer PackagesAdversaries may establish persistence and elevate privileges by using an installer to trigger the execution of malicious content.Votes: 0GitHub stars: 3,518
- T1546.014 EmondAdversaries may gain persistence and elevate privileges by executing malicious content triggered by the Event Monitor Daemon (emond).Votes: 0GitHub stars: 3,518
- T1546.013 Powershell ProfileAdversaries may gain persistence and elevate privileges by executing malicious content triggered by PowerShell profiles.Votes: 0GitHub stars: 3,518
- T1546.011 Application ShimmingAdversaries may establish persistence and/or elevate privileges by executing malicious content triggered by application shims.Votes: 0GitHub stars: 3,518
- T1546.010 Appinit DllsAdversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.Votes: 0GitHub stars: 3,518
- T1546.009 Appcert DllsAdversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.Votes: 0GitHub stars: 3,518
- T1546.008 Accessibility FeaturesAdversaries may establish persistence and/or elevate privileges by executing malicious content triggered by accessibility features.Votes: 0GitHub stars: 3,518
- T1546.007 Netsh Helper DllAdversaries may establish persistence by executing malicious content triggered by Netsh Helper DLLs.Votes: 0GitHub stars: 3,518
- T1546.006 Lcloaddylib AdditionAdversaries may establish persistence by executing malicious content triggered by the execution of tainted binaries.Votes: 0GitHub stars: 3,518
- T1546.005 TrapAdversaries may establish persistence by executing malicious content triggered by an interrupt signal.Votes: 0GitHub stars: 3,518
- T1546.002 ScreensaverAdversaries may establish persistence by executing malicious content triggered by user inactivity.Votes: 0GitHub stars: 3,518
- T1574 011 Services Registry PermissionsAdversaries may execute their own malicious payloads by hijacking the Registry entries used by services.Votes: 0GitHub stars: 3,518
- T1574 010 Services File PermissionsAdversaries may execute their own malicious payloads by hijacking the binaries used by services.Votes: 0GitHub stars: 3,518
- T1574 009 Path Interception By UnquotedAdversaries may execute their own malicious payloads by hijacking vulnerable file path references.Votes: 0GitHub stars: 3,518
- T1574 008 Path Interception By SearchAdversaries may execute their own malicious payloads by hijacking the search order used to load other programs.Votes: 0GitHub stars: 3,518
- T1574 007 Path Interception By PathAdversaries may execute their own malicious payloads by hijacking environment variables used to load libraries.Votes: 0GitHub stars: 3,518