Attack Encyclopedia
How the attacks that actually cause breaches work — written so you can recognise, detect and defend against them. Concepts and defence, not operational recipes.
Phishing
Messages designed to make a person act against their own interest — still the most common way organisations are breached.
SQL Injection
Untrusted input reaching a database query as code rather than data. Decades old, still found, still devastating.
Cross-Site Scripting
Getting the browser to run attacker-supplied script in the context of a site the user trusts.
Ransomware
Malicious encryption of your data, now almost always combined with theft and extortion.
Credential Stuffing
Using passwords leaked from one service to log into another. No hacking required, only reuse.
Server-Side Request Forgery
Making the server fetch a URL of the attacker's choosing, from inside your own network.
These articles explain how attacks work so you can defend against them. They deliberately stop short of operational instructions for attacking real systems. Practical technique is taught inside the Cyber Lab, against environments we own and you are authorised to attack.