Explore various attack methods that can be executed using command-line tools. Understanding these techniques is crucial for both offensive security testing and developing robust defensive strategies.
Brute Force Attack
Attempts to crack passwords or find hidden web pages by trying many combinations.
DDoS Attack
Overwhelms a system with traffic, making it unavailable to legitimate users.
Man-in-the-Middle (MITM)
Intercepts communication between two systems to eavesdrop or modify traffic.
SQL Injection
Exploits vulnerabilities in database queries to manipulate or retrieve data.
Phishing Simulation
Creates and sends fake emails to test user awareness of phishing threats.
Wi-Fi Cracking
Attempts to break into Wi-Fi networks by exploiting weaknesses in protocols.
Cross-Site Scripting (XSS)
Injects malicious scripts into websites that are executed by the victim’s browser.
Command Injection
Injects malicious commands into an application to be executed by the system shell.
Privilege Escalation
Exploits a vulnerability to gain higher-level access on a system.
Malware Infection
Distributes malicious software that harms or compromises a system.
Social Engineering
Manipulates individuals into divulging confidential information or performing actions that compromise security.
DNS Spoofing
Attacks the Domain Name System to redirect traffic to malicious sites.
Password Spraying
Tries a small number of common passwords against many usernames.
Zero-Day Exploit
Exploits a vulnerability that the vendor has not yet patched.
Ransomware Attack
Encrypts a victim’s files and demands a ransom for the decryption key.
Cross-Site Request Forgery (CSRF)
Tricks a user into performing actions they did not intend to on a website.