Category: Glossary
A comprehensive reference point for understanding key terminologies, acronyms, and jargon related to the craft of phishing and social engineering.
-
What is Captive Portal Detection in Phishing?
Explaining captive portal detection and its role in phishing, highlighting its significance in social engineering as it impacts cybersecurity operations.
-
What is a Honeypot in Phishing?
Explore the concept of honeypots in phishing and social engineering, their role in detecting attacks, and how attackers might engage with them.
-
What is Code Injection in Social Engineering?
Define ‘Code Injection’ in Social Engineering, explaining its role in exploiting systems through manipulation or theft of sensitive information.
-
What is OS Command Injection in Phishing?
Exploring OS command injection — a technique where attackers execute unauthorized commands on servers, exploiting vulnerabilities in phishing scenarios.
-
What is Code Injection in Phishing?
An exploration of code injection techniques in phishing, highlighting how attackers inject malicious code into trusted applications to compromise systems.
-
What is Deserialization in Phishing?
Understand deserialization in phishing, its role in attacks, and see real-world examples of how attackers exploit it in phishing campaigns.
-
What is Privilege Escalation in Phishing?
Definition and context for ‘Privilege Escalation’ in phishing, exploring how attackers elevate access following a successful phishing attempt.
-
What is Server-Side Request Forgery (SSRF) in Phishing?
Understand Server-Side Request Forgery (SSRF) in the context of phishing and social engineering, focusing on its manipulation and exploitation in unauthorized server activities.
-
What is Cross-Site Request Forgery (CSRF) in Phishing?
Cross-Site Request Forgery (CSRF) in phishing: understanding the unauthorized request vulnerability used within phishing campaigns.
-
What is Comment Stuffing in HTML Phishing?
Explore ‘comment stuffing,’ a method used in HTML phishing to embed malicious code, evading AI detection in real-world cybersecurity scenarios.
-
What is HTML Comment Stuffing in Phishing?
Explore HTML Comment Stuffing, a phishing evasion technique embedding misleading HTML comments to bypass security filters.
-
What is Comment Stuffing in Phishing?
Explore the tactic of comment stuffing in phishing, designed to evade AI-based detection by injecting benign-seeming HTML comments.
-
What is Comment Stuffing in Phishing?
Explore how ‘comment stuffing’ in phishing evades AI-based detection by hiding phishing content within HTML comments.
-
What is Path Traversal in Social Engineering?
Understand how path traversal in social engineering campaigns allows attackers to gain unauthorized access to files and directories.
-
What is a NIMLOC Record in Phishing?
Explore the concept of NIMLOC Records and their relevance in phishing tactics within DNS logs and communication protocols.
-
What is a NAPTR Record in Phishing?
Explore the role of NAPTR records in phishing attacks, enhancing deception by manipulating DNS entries to mislead victims.
-
What is Rich Communication Services (RCS) in Phishing?
Explore how Rich Communication Services (RCS) is used in phishing attacks to exploit enhanced messaging features and deceive targets.
-
What is OIDC Authentication Bypass in Phishing?
Exploring OIDC Authentication Bypass in phishing, a vulnerability that can be leveraged to gain unauthorized access through improperly verified identity tokens.
-
What is Favicon.ico Method in Host Recon for Phishing?
Explore the favicon.ico method in host reconnaissance, a tactic used in phishing to identify target hosts by analyzing favicon hashes.
-
What is MetaMask Phishing?
Understand MetaMask phishing: how attackers impersonate the cryptocurrency wallet to steal sensitive information like wallet addresses and private keys.