πŸ“‚ 02 - ATT&CK Impact

Overview

MITRE ATT&CK: Impact (TA0040) β€” the adversary is trying to manipulate, interrupt, or destroy systems and data.

Notes here are about disrupting availability or integrity rather than gaining access. Most of what’s in the vault today is Denial of Service (T1498 / T1499): making a machine, network, or service unavailable by flooding it or exhausting its resources (CPU, memory, worker pools, connections) β€” e.g. Slowloris or GraphQL depth abuse.


🧠 Techniques

FileCreated
(incomplete) GraphQL - Depth-based DoSMay 21, 2026
(incomplete) Gunicorn - SlowlorisMay 21, 2026
Gunicorn - Worker TimeoutFriday, April 24th 2026, 10:49:21 pm
SlowlorisApril 24, 2026

πŸ“¦ Tech Stack

FileCreated
(incomplete) GunicornMay 21, 2026

πŸ› οΈ Tools

FileCreated
Filedifficulty
HTB Challenge - ResizerHard