domains / families / security / attack-patterns-reference

attack-patterns-reference

separate

Use when classifying a verified web or WordPress behavior and selecting a related validation skill.

When to use

• A recon result needs to be classified before focused testing.
• Several verified behaviors may form a candidate attack path.
• A WordPress, CORS, XML-RPC, source-leak, or exposed-service signal needs an

When not to use

• Scanner finding list
• Substitute for verification section of owning skill

Skill page

Source