Attack Path Techniques Search

IDNamePlatformFamilyFramework
T1134.005_WindowsAccess Token Manipulation: SID-History InjectionWindowsDefense Evasion, Privilege EscalationMITRE ATT&CK
T1207_WindowsRogue Domain ControllerWindowsDefense EvasionMITRE ATT&CK
T1558.001_WindowsSteal or Forge Kerberos Tickets: Golden TicketWindowsCredential AccessMITRE ATT&CK
T1615_WindowsGroup Policy DiscoveryWindowsDiscoveryMITRE ATT&CK
T1110.003Password SprayingCredential AccessMITRE ATT&CK
T1110.004Credential StuffingCredential AccessMITRE ATT&CK
T1552.001Credentials In FilesCredential AccessMITRE ATT&CK
T1555.006Cloud Secrets Management StoresCredential AccessMITRE ATT&CK
T1565.003Runtime Data ManipulationImpactMITRE ATT&CK
T1505.003Web ShellPersistenceMITRE ATT&CK
WAS.113069SQL Injection Authentication BypassWeb ApplicationInjectionOWASP
WAS.113317Expression Language InjectionInjectionOWASP
WAS.98115SQL InjectionWeb ApplicationInjectionOWASP
WAS.98122Code Injection (Timing Attack)Web ApplicationInjectionOWASP
WAS.98119Blind NoSQL Injection (differential analysis)InjectionOWASP
WAS.98121Code Injection (Php--input WrapperInjectionOWASP
T1526Cloud Service DiscoveryDiscoveryMITRE ATT&CK
WAS.112439Server Side Request ForgeryServer-Side Request Forgery (SSRF)OWASP
WAS.113212Content InjectionInjectionOWASP
WAS.98120Code InjectionInjectionOWASP
WAS.98124Operating System Command Injection (Timing Attack)InjectionOWASP
T1059.009Cloud APIExecutionMITRE ATT&CK
T1548.005Temporary Elevated Cloud AccessDefense Evasion, Privilege EscalationMITRE ATT&CK
T1098.001_AzureAccount Manipulation: Additional Cloud CredentialsEntra IDPersistenceMITRE ATT&CK
T1003.006DCSyncCredential AccessMITRE ATT&CK
T1021.007Cloud ServicesLateral MovementMITRE ATT&CK
T1083File and Directory DiscoveryDiscoveryMITRE ATT&CK
T1114.002Remote Email CollectionCollectionMITRE ATT&CK
T1134.005SID-History InjectionDefense Evasion, Privilege EscalationMITRE ATT&CK
T1207Rogue Domain ControllerDefense EvasionMITRE ATT&CK
T1213Data from Information RepositoriesCollectionMITRE ATT&CK
T1484.001Group Policy ModificationDefense Evasion, Privilege EscalationMITRE ATT&CK
T1530Data from Cloud StorageCollectionMITRE ATT&CK
T1558.001Golden TicketCredential AccessMITRE ATT&CK
T1558.004AS-REP RoastingMITRE ATT&CK
T1615Group Policy DiscoveryDiscoveryMITRE ATT&CK
T1110.004_WindowsBrute Force: Credential Stuffing (Windows)WindowsCredential AccessMITRE ATT&CK
T1114.002_WindowsRemote Email CollectionWindowsCollectionMITRE ATT&CK
T1530_AWSData from Cloud Storage Object (AWS)AWSCollectionMITRE ATT&CK
T1537_AWSTransfer Data to Cloud AccountAWSExfiltrationMITRE ATT&CK
T1580_AWSCloud Infrastructure Discovery(AWS)AWSDiscoveryMITRE ATT&CK
WAS.113162MySQLjs SQL Injection Authentication BypassInjectionOWASP
WAS.98113XML External EntitySecurity MisconfigurationOWASP
WAS.98116NoSQL InjectionInjectionOWASP
WAS.98123Operating System Command InjectionInjectionOWASP
T1069.003Cloud GroupsDiscoveryMITRE ATT&CK