Skip to main content

Learning Paths Leaderboard About Pricing

Cybersecurity Reference

Cybersecurity Glossary

Clear, plain-English definitions of the terms you'll meet in security — 221 terms, from SQL injection to zero trust. Search, jump by letter, or filter by category.

$Search glossary terms

#A B C D E F G H I J K L M N O PQR S T U V W XYZ

221 terms

Account TakeoverAccount Takeover is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Account Takeover helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Active Directory AttackActive Directory Attack is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Active Directory Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Active ReconnaissanceActive Reconnaissance is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Active Reconnaissance helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Address Space Layout Randomization (ASLR)Address Space Layout Randomization (ASLR) is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Address Space Layout Randomization (ASLR) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Advanced Persistent Threat (APT)Advanced Persistent Threat (APT) is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Advanced Persistent Threat (APT) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
AdwareAdware is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Adware helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
AES EncryptionAES Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning AES Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Aircrack-ngAircrack-ng is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Aircrack-ng helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
AmassAmass is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Amass helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
API SecurityAPI Security is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning API Security helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
ARP SpoofingARP Spoofing is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning ARP Spoofing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Asset InventoryAsset Inventory is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Asset Inventory helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Asymmetric EncryptionAsymmetric Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Asymmetric Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography

Baiting AttackBaiting Attack is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Baiting Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
bcryptbcrypt is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning bcrypt helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
BGP HijackingBGP Hijacking is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning BGP Hijacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
BloodHoundBloodHound is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning BloodHound helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Blue TeamBlue Team is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Blue Team helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
BotnetBotnet is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Botnet helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Brute Force AttackBrute Force Attack is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Brute Force Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Buffer OverflowBuffer Overflow is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Buffer Overflow helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Bug BountyBug Bounty is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Bug Bounty helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Burp SuiteBurp Suite is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Burp Suite helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Business Logic FlawBusiness Logic Flaw is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Business Logic Flaw helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security

CEH CertificationCEH Certification is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CEH Certification helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Certificate AuthorityCertificate Authority is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Certificate Authority helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Certificate PinningCertificate Pinning is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Certificate Pinning helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
CIS ControlsCIS Controls is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CIS Controls helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
CISSPCISSP is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CISSP helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
ClickjackingClickjacking is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Clickjacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Cloud MisconfigurationCloud Misconfiguration is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cloud Misconfiguration helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
Cloud Security Posture Management (CSPM)Cloud Security Posture Management (CSPM) is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cloud Security Posture Management (CSPM) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
CMMCCMMC is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CMMC helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Cobalt StrikeCobalt Strike is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cobalt Strike helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Command and Control (C2)Command and Control (C2) is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Command and Control (C2) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Command InjectionCommand Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Command Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Common Weakness Enumeration (CWE)Common Weakness Enumeration (CWE) is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Common Weakness Enumeration (CWE) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
CompTIA Security+CompTIA Security+ is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CompTIA Security+ helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Computer VirusComputer Virus is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Computer Virus helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Computer WormComputer Worm is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Computer Worm helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Container EscapeContainer Escape is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Container Escape helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
Cookie PoisoningCookie Poisoning is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cookie Poisoning helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
CORS MisconfigurationCORS Misconfiguration is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CORS Misconfiguration helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Credential StuffingCredential Stuffing is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Credential Stuffing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
CRLF InjectionCRLF Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CRLF Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Cross-Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cross-Site Request Forgery (CSRF) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Cross-Site Scripting (XSS)Cross-Site Scripting (XSS) is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cross-Site Scripting (XSS) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Cryptographic Hash FunctionCryptographic Hash Function is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cryptographic Hash Function helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Cryptographic SaltCryptographic Salt is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Cryptographic Salt helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
CVE NumberingCVE Numbering is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CVE Numbering helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
CVSS ScoringCVSS Scoring is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning CVSS Scoring helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks

Data Execution Prevention (DEP/NX)Data Execution Prevention (DEP/NX) is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Data Execution Prevention (DEP/NX) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Data Loss Prevention (DLP)Data Loss Prevention (DLP) is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Data Loss Prevention (DLP) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
DCSync AttackDCSync Attack is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DCSync Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
DDoS AttackDDoS Attack is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DDoS Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
DevSecOpsDevSecOps is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DevSecOps helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
DHCP StarvationDHCP Starvation is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DHCP Starvation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Diffie-Hellman Key ExchangeDiffie-Hellman Key Exchange is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Diffie-Hellman Key Exchange helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Digital SignatureDigital Signature is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Digital Signature helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
DLL HijackingDLL Hijacking is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DLL Hijacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
DLL InjectionDLL Injection is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DLL Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
DNS EnumerationDNS Enumeration is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DNS Enumeration helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
DNS SpoofingDNS Spoofing is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DNS Spoofing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
DNS TunnelingDNS Tunneling is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DNS Tunneling helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
DOM-Based XSSDOM-Based XSS is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning DOM-Based XSS helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Domain FrontingDomain Fronting is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Domain Fronting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats

Elliptic Curve CryptographyElliptic Curve Cryptography is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Elliptic Curve Cryptography helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Endpoint Detection and Response (EDR)Endpoint Detection and Response (EDR) is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Endpoint Detection and Response (EDR) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Ethical HackingEthical Hacking is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Ethical Hacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Evil Twin AttackEvil Twin Attack is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Evil Twin Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Extended Detection and Response (XDR)Extended Detection and Response (XDR) is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Extended Detection and Response (XDR) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations

ffufffuf is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning ffuf helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
File Upload VulnerabilityFile Upload Vulnerability is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning File Upload Vulnerability helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Fileless MalwareFileless Malware is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Fileless Malware helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
FirewallFirewall is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Firewall helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
FootprintingFootprinting is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Footprinting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Format String VulnerabilityFormat String Vulnerability is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Format String Vulnerability helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security

GDPR Security RequirementsGDPR Security Requirements is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning GDPR Security Requirements helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
GhidraGhidra is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Ghidra helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
GIAC CertificationGIAC Certification is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning GIAC Certification helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
GobusterGobuster is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Gobuster helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Golden Ticket AttackGolden Ticket Attack is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Golden Ticket Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Google DorkingGoogle Dorking is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Google Dorking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT

HashcatHashcat is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Hashcat helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Heap OverflowHeap Overflow is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Heap Overflow helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
HIPAA Security RuleHIPAA Security Rule is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning HIPAA Security Rule helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
HMACHMAC is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning HMAC helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
HTTP Request SmugglingHTTP Request Smuggling is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning HTTP Request Smuggling helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Hydra Password CrackerHydra Password Cracker is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Hydra Password Cracker helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools

IAM MisconfigurationIAM Misconfiguration is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning IAM Misconfiguration helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
ICMP TunnelingICMP Tunneling is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning ICMP Tunneling helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
IDA ProIDA Pro is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning IDA Pro helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Identity FederationIdentity Federation is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Identity Federation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
ImpacketImpacket is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Impacket helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Incident ResponseIncident Response is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Incident Response helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Infrastructure as Code SecurityInfrastructure as Code Security is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Infrastructure as Code Security helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
Insecure DeserializationInsecure Deserialization is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Insecure Deserialization helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Insecure Direct Object Reference (IDOR)Insecure Direct Object Reference (IDOR) is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Insecure Direct Object Reference (IDOR) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Intrusion Detection System (IDS)Intrusion Detection System (IDS) is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Intrusion Detection System (IDS) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Intrusion Prevention System (IPS)Intrusion Prevention System (IPS) is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Intrusion Prevention System (IPS) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
ISO 27001ISO 27001 is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning ISO 27001 helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks

John the RipperJohn the Ripper is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning John the Ripper helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
JWT VulnerabilitiesJWT Vulnerabilities is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning JWT Vulnerabilities helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security

KerberoastingKerberoasting is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Kerberoasting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Kernel ExploitKernel Exploit is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Kernel Exploit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
KeyloggerKeylogger is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Keylogger helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Kubernetes SecurityKubernetes Security is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Kubernetes Security helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security

LDAP InjectionLDAP Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning LDAP Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Living Off the LandLiving Off the Land is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Living Off the Land helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
LOLBASLOLBAS is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning LOLBAS helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security

MaltegoMaltego is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Maltego helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Malware AnalysisMalware Analysis is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Malware Analysis helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Malware Reverse EngineeringMalware Reverse Engineering is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Malware Reverse Engineering helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Man-in-the-Middle AttackMan-in-the-Middle Attack is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Man-in-the-Middle Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
MetasploitMetasploit is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Metasploit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
MimikatzMimikatz is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Mimikatz helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
MITRE ATT&CK FrameworkMITRE ATT&CK Framework is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning MITRE ATT&CK Framework helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Multi-Factor Authentication (MFA)Multi-Factor Authentication (MFA) is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Multi-Factor Authentication (MFA) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access

Nessus ScannerNessus Scanner is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Nessus Scanner helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Network SegmentationNetwork Segmentation is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Network Segmentation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Network SniffingNetwork Sniffing is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Network Sniffing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
NiktoNikto is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Nikto helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
NIST Cybersecurity FrameworkNIST Cybersecurity Framework is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning NIST Cybersecurity Framework helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
NIST SP 800-53NIST SP 800-53 is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning NIST SP 800-53 helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
NmapNmap is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Nmap helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
NoSQL InjectionNoSQL Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning NoSQL Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security

OAuth MisconfigurationOAuth Misconfiguration is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OAuth Misconfiguration helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Open RedirectOpen Redirect is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Open Redirect helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
OpenVASOpenVAS is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OpenVAS helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
OSCP CertificationOSCP Certification is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OSCP Certification helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
OSINTOSINT is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OSINT helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
OWASP Top 10OWASP Top 10 is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OWASP Top 10 helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
OWASP ZAPOWASP ZAP is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning OWASP ZAP helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools

Packet InjectionPacket Injection is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Packet Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Pass-the-HashPass-the-Hash is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Pass-the-Hash helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Pass-the-TicketPass-the-Ticket is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Pass-the-Ticket helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Passive ReconnaissancePassive Reconnaissance is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Passive Reconnaissance helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Password SprayingPassword Spraying is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Password Spraying helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Patch ManagementPatch Management is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Patch Management helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Path TraversalPath Traversal is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Path Traversal helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
PCI DSSPCI DSS is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning PCI DSS helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Penetration TestingPenetration Testing is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Penetration Testing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Perfect Forward SecrecyPerfect Forward Secrecy is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Perfect Forward Secrecy helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
PGP EncryptionPGP Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning PGP Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
PhishingPhishing is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Phishing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Phishing KitPhishing Kit is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Phishing Kit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Port ScanningPort Scanning is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Port Scanning helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Post-Quantum CryptographyPost-Quantum Cryptography is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Post-Quantum Cryptography helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
PretextingPretexting is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Pretexting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Principle of Least PrivilegePrinciple of Least Privilege is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Principle of Least Privilege helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Privilege EscalationPrivilege Escalation is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Privilege Escalation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Privileged Access Management (PAM)Privileged Access Management (PAM) is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Privileged Access Management (PAM) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Process InjectionProcess Injection is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Process Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Public Key Infrastructure (PKI)Public Key Infrastructure (PKI) is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Public Key Infrastructure (PKI) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Purple TeamPurple Team is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Purple Team helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations

Race ConditionRace Condition is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Race Condition helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Rainbow TableRainbow Table is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Rainbow Table helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
RansomwareRansomware is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Ransomware helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Rate Limiting BypassRate Limiting Bypass is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Rate Limiting Bypass helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Recon-ngRecon-ng is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Recon-ng helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Red TeamRed Team is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Red Team helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Return-Oriented Programming (ROP)Return-Oriented Programming (ROP) is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Return-Oriented Programming (ROP) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Risk AssessmentRisk Assessment is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Risk Assessment helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Role-Based Access Control (RBAC)Role-Based Access Control (RBAC) is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Role-Based Access Control (RBAC) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
RootkitRootkit is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Rootkit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
RSA EncryptionRSA Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning RSA Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography

S3 Bucket ExposureS3 Bucket Exposure is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning S3 Bucket Exposure helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
SAML VulnerabilitiesSAML Vulnerabilities is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SAML Vulnerabilities helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Sandbox EscapeSandbox Escape is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Sandbox Escape helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
SANS Incident HandlerSANS Incident Handler is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SANS Incident Handler helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Secrets ManagementSecrets Management is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Secrets Management helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
Security AuditSecurity Audit is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Security Audit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Security Awareness TrainingSecurity Awareness Training is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Security Awareness Training helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Security Operations Center (SOC)Security Operations Center (SOC) is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Security Operations Center (SOC) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Server-Side Request Forgery (SSRF)Server-Side Request Forgery (SSRF) is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Server-Side Request Forgery (SSRF) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Server-Side Template Injection (SSTI)Server-Side Template Injection (SSTI) is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Server-Side Template Injection (SSTI) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Serverless SecurityServerless Security is a core cloud security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Serverless Security helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cloud Security
Session FixationSession Fixation is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Session Fixation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Session HijackingSession Hijacking is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Session Hijacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
SHA-256SHA-256 is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SHA-256 helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
ShellcodeShellcode is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Shellcode helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
ShodanShodan is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Shodan helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
SIEMSIEM is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SIEM helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Silver Ticket AttackSilver Ticket Attack is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Silver Ticket Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Single Sign-On (SSO)Single Sign-On (SSO) is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Single Sign-On (SSO) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
SmishingSmishing is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Smishing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
SOC 2 ComplianceSOC 2 Compliance is a core certifications & frameworks concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SOC 2 Compliance helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Certifications & Frameworks
Social EngineeringSocial Engineering is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Social Engineering helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Spear PhishingSpear Phishing is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Spear Phishing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
SpywareSpyware is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Spyware helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
SQL InjectionSQL Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SQL Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
sqlmapsqlmap is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning sqlmap helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
SSL StrippingSSL Stripping is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SSL Stripping helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
STP ManipulationSTP Manipulation is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning STP Manipulation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Subdomain TakeoverSubdomain Takeover is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Subdomain Takeover helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Supply Chain AttackSupply Chain Attack is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Supply Chain Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
Symmetric EncryptionSymmetric Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Symmetric Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
SYN FloodSYN Flood is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning SYN Flood helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security

TCP Session HijackingTCP Session Hijacking is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning TCP Session Hijacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
theHarvestertheHarvester is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning theHarvester helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Threat HuntingThreat Hunting is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Threat Hunting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Threat IntelligenceThreat Intelligence is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Threat Intelligence helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
TLS/SSLTLS/SSL is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning TLS/SSL helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Token ImpersonationToken Impersonation is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Token Impersonation helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Trojan HorseTrojan Horse is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Trojan Horse helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
TyposquattingTyposquatting is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Typosquatting helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats

Use-After-FreeUse-After-Free is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Use-After-Free helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security

Virtual Private Network (VPN)Virtual Private Network (VPN) is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Virtual Private Network (VPN) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
VishingVishing is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Vishing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
VLAN HoppingVLAN Hopping is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning VLAN Hopping helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Volatility FrameworkVolatility Framework is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Volatility Framework helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
Vulnerability AssessmentVulnerability Assessment is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Vulnerability Assessment helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations

Watering Hole AttackWatering Hole Attack is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Watering Hole Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
WebSocket HijackingWebSocket Hijacking is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning WebSocket Hijacking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
Whaling AttackWhaling Attack is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Whaling Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
WHOIS LookupWHOIS Lookup is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning WHOIS Lookup helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Wi-Fi Deauthentication AttackWi-Fi Deauthentication Attack is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Wi-Fi Deauthentication Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
WiresharkWireshark is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Wireshark helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools

XML External Entity (XXE) InjectionXML External Entity (XXE) Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning XML External Entity (XXE) Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security

Zero Trust NetworkZero Trust Network is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Zero Trust Network helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Zero-Day ExploitZero-Day Exploit is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Zero-Day Exploit helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats

[>_] CODELIVLY

Cybersecurity eLearning with guided scenarios, gamified progression, and verifiable credentials.

GitHub LinkedIn

Learn

Modules
Learning paths
Career paths
Glossary
Leaderboard

Product

Pricing
Certificates
Competitions
Organisations
Create a team

Company

Pricing
Certificates
Competitions

Newsletter

Updates only — unsubscribe anytime.

© 2026 Codelivly

Privacy Terms Disclaimer Contact