Attack Types & Techniques
A practical guide to the attacks pentesters run in the real world — how each one works, why it matters, and the techniques used to execute and detect it.
Denial-of-Service (DoS & DDoS)NetworkDNS SpoofingNetworkGolden TicketActive DirectoryInsecure Direct Object References (IDOR)Web ApplicationKerberoastingActive DirectoryLLMNR & NBT-NS PoisoningNetworkMan-in-the-Middle (MITM) AttacksNetworkPass-the-HashActive DirectoryPass-the-TicketActive DirectoryPassword SprayingCredential Access