IDORSSRFAUTH BYPASSJWT FORGERYRACE CONDITIONXXEBROKEN OBJECT-LEVEL AUTHPRIVILEGE ESCALATIONMASS ASSIGNMENTGRAPHQL INTROSPECTION ABUSEIDORSSRFAUTH BYPASSJWT FORGERYRACE CONDITIONXXEBROKEN OBJECT-LEVEL AUTHPRIVILEGE ESCALATIONMASS ASSIGNMENTGRAPHQL INTROSPECTION ABUSE

Frameworks & standards

MITRE ATT&CK

MITRE ATT&CK is a globally used knowledge base of adversary tactics, techniques, and procedures (TTPs) observed in real-world attacks, organized by tactic (the attacker's goal) and technique (how they achieve it). It is widely used to structure red teaming, detection engineering, and threat intelligence.

Key points

Catalog of real-world adversary tactics and techniques.
Structures red teaming, detection, and threat intel.
Techniques (e.g. T1190) are referenced in this graph.

CAPEC Red Team Purple Team Attack Chain

References

MITRE ATT&CK

Impactr is an autonomous AI penetration testing platform - it investigates, chains, and proves web and API vulnerabilities with reproducible evidence.

Join the waitlist

← All terms

MITRE ATT&CK

Key points

Related

References

MITRE ATT&CK

Key points

Related

References