📂 02 - ATT&CK Initial Access
Overview
MITRE ATT&CK: Initial Access (TA0001) — the adversary is trying to get into your network.
Getting the first foothold. For web targets this is almost always T1190 Exploit Public-Facing Application — logic flaws and authentication bypasses that let an attacker in without valid credentials — plus phishing and valid-account abuse.
🧠 Techniques
| File | Created |
|---|---|
| (incomplete) DNS Rebinding | May 21, 2026 |
| (incomplete) HTTP Parameter Pollution | July 17, 2026 |
| (incomplete) HTTP version difference | May 21, 2026 |
| (incomplete) Nginx Misconfiguration | May 21, 2026 |
| (incomplete) Race Condition Exploitation | May 21, 2026 |
| (incomplete) Secure Design Pattern - Login | May 21, 2026 |
| (incomplete) Server Misconfiguration - Nginx | May 21, 2026 |
| Cross-site Request Forgery | May 21, 2026 |
| WebSocket Exploitation | August 10, 2026 |
📦 Tech Stack
| File | Created |
|---|
🛠️ Tools
| File | Created |
|---|
🚩 Related CTF Operations
| File | difficulty |
|---|---|
| HTB Machine - Cohort | Easy |
| HTB Sherlock - Phishing_Email | Very Easy |
| HTB Sherlock - PhishNet | Very Easy |