π 02 - ATT&CK Impact
Overview
MITRE ATT&CK: Impact (TA0040) β the adversary is trying to manipulate, interrupt, or destroy systems and data.
Notes here are about disrupting availability or integrity rather than gaining access. Most of whatβs in the vault today is Denial of Service (T1498 / T1499): making a machine, network, or service unavailable by flooding it or exhausting its resources (CPU, memory, worker pools, connections) β e.g. Slowloris or GraphQL depth abuse.
π§ Techniques
| File | Created |
|---|---|
| (incomplete) GraphQL - Depth-based DoS | May 21, 2026 |
| (incomplete) Gunicorn - Slowloris | May 21, 2026 |
| Gunicorn - Worker Timeout | Friday, April 24th 2026, 10:49:21 pm |
| Slowloris | April 24, 2026 |
π¦ Tech Stack
| File | Created |
|---|---|
| (incomplete) Gunicorn | May 21, 2026 |
π οΈ Tools
| File | Created |
|---|
π© Related CTF Operations
| File | difficulty |
|---|---|
| HTB Challenge - Resizer | Hard |