Category: Glossary
A comprehensive reference point for understanding key terminologies, acronyms, and jargon related to the craft of phishing and social engineering.
-
What is OS Command Injection in Phishing?
Exploring OS command injection — a technique where attackers execute unauthorized commands on servers, exploiting vulnerabilities in phishing scenarios.
-
What is Code Injection in Phishing?
An exploration of code injection techniques in phishing, highlighting how attackers inject malicious code into trusted applications to compromise systems.
-
What is Deserialization in Phishing?
Understand deserialization in phishing, its role in attacks, and see real-world examples of how attackers exploit it in phishing campaigns.
-
What is Privilege Escalation in Phishing?
Definition and context for ‘Privilege Escalation’ in phishing, exploring how attackers elevate access following a successful phishing attempt.
-
What is Server-Side Request Forgery (SSRF) in Phishing?
Understand Server-Side Request Forgery (SSRF) in the context of phishing and social engineering, focusing on its manipulation and exploitation in unauthorized server activities.
-
What is Cross-Site Request Forgery (CSRF) in Phishing?
Cross-Site Request Forgery (CSRF) in phishing: understanding the unauthorized request vulnerability used within phishing campaigns.
-
What is Comment Stuffing in HTML Phishing?
Explore ‘comment stuffing,’ a method used in HTML phishing to embed malicious code, evading AI detection in real-world cybersecurity scenarios.
-
What is HTML Comment Stuffing in Phishing?
Explore HTML Comment Stuffing, a phishing evasion technique embedding misleading HTML comments to bypass security filters.
-
What is Comment Stuffing in Phishing?
Explore the tactic of comment stuffing in phishing, designed to evade AI-based detection by injecting benign-seeming HTML comments.
-
What is Comment Stuffing in Phishing?
Explore how ‘comment stuffing’ in phishing evades AI-based detection by hiding phishing content within HTML comments.
-
What is Path Traversal in Social Engineering?
Understand how path traversal in social engineering campaigns allows attackers to gain unauthorized access to files and directories.
-
What is a NIMLOC Record in Phishing?
Explore the concept of NIMLOC Records and their relevance in phishing tactics within DNS logs and communication protocols.
-
What is a NAPTR Record in Phishing?
Explore the role of NAPTR records in phishing attacks, enhancing deception by manipulating DNS entries to mislead victims.
-
What is Rich Communication Services (RCS) in Phishing?
Explore how Rich Communication Services (RCS) is used in phishing attacks to exploit enhanced messaging features and deceive targets.
-
What is OIDC Authentication Bypass in Phishing?
Exploring OIDC Authentication Bypass in phishing, a vulnerability that can be leveraged to gain unauthorized access through improperly verified identity tokens.
-
What is Favicon.ico Method in Host Recon for Phishing?
Explore the favicon.ico method in host reconnaissance, a tactic used in phishing to identify target hosts by analyzing favicon hashes.
-
What is MetaMask Phishing?
Understand MetaMask phishing: how attackers impersonate the cryptocurrency wallet to steal sensitive information like wallet addresses and private keys.
-
What is Metamask Phishing in the Context of Cryptocurrency?
An overview of Metamask phishing attacks targeting users of the Metamask cryptocurrency wallet to steal credentials.
-
What is Host Recon in Phishing and Social Engineering?
An exploration of host reconnaissance in phishing and social engineering, detailing its role in crafting effective campaigns and its methods of execution.
-
What is Process Name Masquerading in Social Engineering Attacks?
Learn what Process Name Masquerading is and its role in social engineering attacks that disguise malicious processes as legitimate ones.