🗺️ 01 - Web Security
Parent: 000 - Global Index
Overview
Scope: Application level.
Focus: Vulnerabilities involving HTTP/HTTPS, web servers, APIs, and client-side logic.
This domain covers all attacks against web applications and their underlying logic. It includes the OWASP Top 10, input validation flaws (SQLi, XSS), authentication bypasses, and API security. Notes here focus on manipulating the communication between a client (browser) and the server to access unauthorized data or execute arbitrary code.
Secondary Categories
| File | Created |
|---|---|
| 02 - ATT&CK Collection | September 28, 2026 |
| 02 - ATT&CK Command and Control | September 28, 2026 |
| 02 - ATT&CK Credential Access | Thursday, March 5th 2026, 12:25:58 pm |
| 02 - ATT&CK Defense Evasion | September 28, 2026 |
| 02 - ATT&CK Discovery | September 28, 2026 |
| 02 - ATT&CK Execution | Friday, January 30th 2026, 10:36:12 pm |
| 02 - ATT&CK Exfiltration | September 28, 2026 |
| 02 - ATT&CK Impact | Friday, May 22nd 2026, 4:49:23 pm |
| 02 - ATT&CK Initial Access | September 28, 2026 |
| 02 - ATT&CK Lateral Movement | September 28, 2026 |
| 02 - ATT&CK Persistence | September 28, 2026 |
| 02 - ATT&CK Privilege Escalation | Thursday, March 5th 2026, 1:36:33 pm |
| 02 - ATT&CK Reconnaissance | September 28, 2026 |