API Abuse API abuse arises when an attacker uses a programming interface in a way the application did not anticipate or did not restrict enough. An API is not merely a technical add-on to the application. It is often the main entrance to the data, the users, the orders, the payments and the administration.

Authentication Bypass An authentication bypass means the attacker reaches a protected part of the system without logging in the ordinary way. They need not know a password. Sometimes a flaw in the logic is enough, or an unprotected endpoint, a predictable token, a misconfigured proxy, or a gap between two steps of the login.

Backdoor … can equally be a user account nobody watches, or web shell access left on a server.

Cross-Site Request Forgery If it is enough for the web application that the request arrives with a valid session, the attacker can carry out an action the user never intended. A change of …

Cross-Site Scripting … ite scripting, better known as XSS, arises when a web application allows somebody else's script to be displayed and executed in the user's browser. The attacker …

Crypto-wallet drainer A crypto wallet works by signing transactions that move crypto assets. Draining a wallet is the process in which the user, believing they are doing something legitimate, signs a transaction or an approval that hands the attacker control of those assets.

Path Traversal Path traversal is an attack in which the attacker tries to step out of the permitted directory and reach files the application should never display. The best-known pattern is a sequence such as `../`, which walks the path back up the file system level by level.

SQL Injection SQL injection usually arises when a web application passes user input blindly to the database on the web server. Instead of ordinary text, the attacker can put …

SSRF … F is a vulnerability in which the attacker gets a web server to send a request to an address of the attacker's choosing. The distinction matters: the request is …

Watering Hole Attack A watering hole attack does not chase the victim directly. The attacker first finds a site the target group visits regularly, then compromises that site or the content loaded through it. The victim then comes to the place of the attack on their own, doing what they normally do.

Credential stuffing A well-known web shop takes a wave of logins from users whose data leaked on a competing platform. A good share of the accounts will be compromised — that much …

DNS Poisoning … into the browser and DNS takes them to the wrong web server. On paper the name is the same. In reality the road leads somewhere else.

Distributed Denial of Service / DDoS … cture and reflected traffic to bury the target in web requests until the server is blocked. The aim is not data theft but choking the service into unavailabilit …

Malvertising … -to-date browser, blocking suspicious adverts and web filtering are not comfort here but a reduction of the attack surface.

Pretexting … icly available information, LinkedIn, the company website, job adverts, old emails and the habits of the organization. The goal can be a password, a document, a …

Prompt injection … alicious instruction sits hidden in a document, a web page or an email the agent reads. The victim often never sees the instruction, but the model will process …

Ransomware … y nor that the data stops circulating on the dark web. It guarantees one thing only — funding the attack on the next victim.

Remote Code Execution … technical event. After the first execution come a web shell, further tools, data theft, lateral movement and an attempt to keep the unauthorized access alive. R …

Resource Exhaustion … ck keeps connections open and slowly consumes the web server's capacity.

Session Hijacking … he difference is that the emphasis here is on the web session and its identifier.

Trojan … is the same. The difference is one letter in the web address.