All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 21,001–21,024 of 31,696 skills
- T1574 007 Path Interception By PathAdversaries may execute their own malicious payloads by hijacking environment variables used to load libraries.Votes: 0GitHub stars: 3,518
- T1574 005 Executable Installer FileAdversaries may execute their own malicious payloads by hijacking the binaries used by an installer.Votes: 0GitHub stars: 3,518
- T1547 001 Registry Run Keys StartupAdversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.Votes: 0GitHub stars: 3,518
- T1098 007 Additional Local Or DomainAn adversary may add additional local or domain groups to an adversary-controlled account to maintain persistent access to a system or domain.Votes: 0GitHub stars: 3,518
- T1098 006 Additional Container ClusterAn adversary may add additional roles or permissions to an adversary-controlled user or service account to maintain persistent access to a container orchestration system.Votes: 0GitHub stars: 3,518
- T1098 002 Additional Email DelegateAdversaries may grant additional permission levels to maintain persistent access to an adversary-controlled email account.Votes: 0GitHub stars: 3,518
- T1037 Boot Or Logon InitializationAdversaries may use scripts automatically executed at boot or logon initialization to establish persistence.Votes: 0GitHub stars: 3,518
- T1671 Cloud Application IntegrationAdversaries may achieve persistence by leveraging OAuth application integrations in a software-as-a-service environment.Votes: 0GitHub stars: 3,518
- T1668 Exclusive ControlAdversaries who successfully compromise a system may attempt to maintain persistence by “closing the door” behind them – in other words, by preventing other threat actors from initially accessing o...Votes: 0GitHub stars: 3,518
- T1653 Power SettingsAdversaries may impair a system's ability to hibernate, reboot, or shut down in order to extend access to infected machines.Votes: 0GitHub stars: 3,518
- T1574 Hijack Execution FlowAdversaries may execute their own malicious payloads by hijacking the way operating systems run programs.Votes: 0GitHub stars: 3,518
- T1574.014 AppdomainmanagerAdversaries may execute their own malicious payloads by hijacking how the .NET `AppDomainManager` loads assemblies.Votes: 0GitHub stars: 3,518
- T1574.013 KernelcallbacktableAdversaries may abuse the <code>KernelCallbackTable</code> of a process to hijack its execution flow in order to run their own payloads.Votes: 0GitHub stars: 3,518
- T1574.012 CorprofilerAdversaries may leverage the COR_PROFILER environment variable to hijack the execution flow of programs that load the .NET CLR.Votes: 0GitHub stars: 3,518
- T1574.006 Dynamic Linker HijackingAdversaries may execute their own malicious payloads by hijacking environment variables the dynamic linker uses to load shared libraries.Votes: 0GitHub stars: 3,518
- T1574.004 Dylib HijackingAdversaries may execute their own payloads by placing a malicious dynamic library (dylib) with an expected name in a path a victim application searches at runtime.Votes: 0GitHub stars: 3,518
- T1574.001 DllAdversaries may abuse dynamic-link library files (DLLs) in order to achieve persistence, escalate privileges, and evade defenses.Votes: 0GitHub stars: 3,518
- T1554 Compromise Host Software BinaryAdversaries may modify host software binaries to establish persistent access to systems.Votes: 0GitHub stars: 3,518
- T1547 Boot Or Logon Autostart ExecutionAdversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence or gain higher-level privileges on compromised systems.Votes: 0GitHub stars: 3,518
- T1547.015 Login ItemsAdversaries may add login items to execute upon user login to gain persistence or escalate privileges.Votes: 0GitHub stars: 3,518
- T1547.014 Active SetupAdversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.Votes: 0GitHub stars: 3,518
- T1547.013 Xdg Autostart EntriesAdversaries may add or modify XDG Autostart Entries to execute malicious programs or commands when a user’s desktop environment is loaded at login.Votes: 0GitHub stars: 3,518
- T1547.012 Print ProcessorsAdversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.Votes: 0GitHub stars: 3,518
- T1547.010 Port MonitorsAdversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.Votes: 0GitHub stars: 3,518