Free Resources
Free knowledge
90+ free cybersecurity infographics for the entire community. No forms to download. Just shared knowledge.
105 of 105 resources
Anatomy of Port Scanning
Scan types, techniques, and indicators to identify port scanning on a network.
Anatomy of a Security Operations Center (SOC)
Key components, roles, and processes inside a Security Operations Center.
Fuzzing Methodology
Security testing technique using random inputs to discover vulnerabilities.
EDR/XDR
How EDR and XDR work to detect and respond to endpoint threats.
Buffer Overflow Attack
How buffer overflow attacks work to execute arbitrary code.
Signs of a Phishing Email
Common indicators used to identify phishing emails.
Password Cracking
Methods used to crack passwords using brute force, dictionaries and hybrid attacks.
Slowloris Attack
How Slowloris exhausts HTTP connections by keeping them open as long as possible.
SSDP Amplification Attack
How attackers use UPnP/SSDP devices to amplify DDoS traffic.
Red Team
Functions and methodologies used by Red Teams to simulate real-world attacks.
DevSecOps Process
How to integrate security into CI/CD pipelines and DevOps processes.
Macro Virus
How Office documents with malicious macros are used to distribute malware.
IoT Attack
How attackers compromise IoT devices and exploit connected networks.
Spyware
How spyware collects sensitive information and monitors user activity.
BGP Hijacking Attack
How attackers manipulate BGP routes to redirect or intercept internet traffic.
OSINT
How to gather intelligence using open-source intelligence techniques.
Obfuscated JavaScript Attack
Evasion and concealment techniques using obfuscated JavaScript.
DKIM
How DKIM protects emails using cryptographic signatures.
SQL Injection Attack
How attackers inject malicious SQL queries to compromise databases.
Phishing Attack
How phishing attacks work and the most common techniques used to deceive users.
Subdomain Takeover Attack
How misconfigured subdomains can be hijacked by attackers.
Dirty Frag Vulnerability
Vulnerability that allows packet fragmentation to bypass security systems.
MAC Flooding Attack
How attackers overflow switch CAM tables to capture network traffic.
Firewall Rule Management
Process for securely managing, auditing, and optimizing firewall rules.
MITRE ATT&CK
MITRE ATT&CK framework for classifying adversary tactics and techniques.
JWT Attack
How attackers exploit JSON Web Token vulnerabilities to escalate privileges.
Command and Control Attack
How C2 channels used by malware and threat actors operate.
MFA Synchronization Attack
How attackers exploit MFA synchronization mechanisms to gain unauthorized access.
Reflection Amplification DDoS
DDoS attacks based on reflection and amplification using exposed services.
VPN
How VPNs protect communications and privacy over public networks.
SSO and SAML
How SSO and SAML work to centralize authentication and access management.
Wireshark Traffic Analysis
How to use Wireshark to capture and analyze network traffic.
Pentesting
Methodologies and phases used in offensive penetration testing.
Microservices Attack
Common attack vectors against microservices-based architectures.
AI Systems
Architecture and operation of modern artificial intelligence systems.
Brute Force Attack
How brute force attacks against credentials and systems operate.
AI-Powered Cybercrime
How cybercriminals use artificial intelligence to automate attacks and fraud.
Watering Hole Attack
How attackers compromise websites frequented by targets to distribute malware.
Reverse Proxy Phishing Attack
How attackers use reverse proxies to capture credentials and MFA sessions.
Malware Analysis
Methodologies and techniques used to analyze malware samples.
Wangiri Scam
How fraudulent missed-call scams known as Wangiri operate.
Memcached DDoS Attack
DDoS amplification attacks using exposed Memcached servers.
Server-Side Request Forgery
How attackers force servers to make malicious internal or external requests.
Ransomware
How ransomware attacks operate through encryption and extortion phases.
Digital Forensics
Methodologies used to collect and analyze digital evidence.
BOLA Attack
How attackers exploit Broken Object Level Authorization vulnerabilities in APIs.
IDOR Attack
How attackers exploit insecure direct object references in web applications.
Multi-Factor Authentication
How MFA strengthens authentication using multiple verification factors.
Supply Chain Attack
How attackers compromise vendors, libraries and CI/CD pipelines to distribute malware.
Cobalt Strike Methodology
Methodology for using Cobalt Strike in attack simulations and penetration testing.
Fileless Malware
How fileless malware operates in memory to evade traditional detection mechanisms.
NTP Amplification DDoS
How DDoS attacks using amplification through NTP servers work.
Active Directory Attack
Full anatomy of an attack against Active Directory environments, from reconnaissance to exfiltration.
HTTP Flood DDoS Attack
How DDoS attacks targeting applications and HTTP servers work.
Computer Worms
How worms automatically spread across networks and vulnerable systems.
Botnet DDoS Attack
How botnets are used to perform distributed denial-of-service attacks.
Living Off The Land
How attackers use legitimate system tools to avoid detection.
Almost Impossible Password
Best practices for creating strong passwords resistant to attacks.
Man-in-the-Middle Attack
How attackers intercept and manipulate communications between two parties.
Fake Online Shopping Fraud
How online shopping frauds operate through fake stores and deceptive offers.
Social Engineering Attack
Psychological manipulation techniques used to gain unauthorized access.
Threat Hunting
How analysts proactively search for advanced threats inside organizations.
DMARC
How DMARC helps prevent email spoofing and phishing.
EDR/XDR Bypass
Techniques used to evade modern EDR and XDR solutions.
Linux Privilege Escalation
How attackers escalate privileges on Linux systems using insecure configurations and vulnerabilities.
MFA Fatigue Attack
How attackers abuse MFA notifications to trick users into granting access.
DNS Flood DDoS Attack
How attackers overwhelm DNS services using flood-based attacks.
Web Application Attack
Anatomy of common attacks against modern web applications.
Browser Fingerprinting
How websites identify users using browser fingerprinting techniques.
HTTP Request Smuggling
How HTTP inconsistencies allow attackers to manipulate proxies and backend servers.
APT Attack
How advanced persistent threats operate inside organizations.
TCP SYN Flood Attack
How SYN Flood attacks exhaust resources by overwhelming TCP connections.
Purple Team
How Purple Teams integrate offensive and defensive cybersecurity capabilities.
Blue Team
Roles and responsibilities of Blue Team cybersecurity professionals.
Fast Loan App Fraud
How fraudulent quick-loan apps extort users and steal personal information.
Rootkit
How rootkits hide malicious processes and maintain persistence on compromised systems.
Sniffing Attack
How attackers capture and analyze network traffic to obtain sensitive information.
Continuous Zero Trust Verification
How Zero Trust continuously validates identities, devices, and access.
Adversary-in-the-Middle Attack
How attackers intercept sessions and credentials using AITM attacks.
Exploitation Cycle
Common phases attackers use to compromise systems and maintain access.
Kubernetes Attack
Threats and attack vectors against Kubernetes containers and clusters.
API Attack
Common attack vectors targeting modern APIs and REST services.
Cloud Infrastructure Attack
Common attack vectors against AWS, Azure and GCP infrastructure.
DNS Cache Poisoning Attack
How attackers manipulate DNS responses to redirect users to malicious websites.
Firewall Evasion Methodology
Methodologies and techniques used to evade firewall controls and network restrictions.
Cross-Site Scripting (XSS)
How attackers inject malicious scripts into vulnerable web applications.
Bug Bounty Hunting
Methodologies used to find vulnerabilities in Bug Bounty programs.
Reflected XSS Attack
How reflected Cross-Site Scripting works and its most common vectors.
Phishing Through Fraudulent Domains
How attackers use fake domains to impersonate brands and steal credentials.
Volumetric DDoS Attack
DDoS attacks designed to saturate bandwidth and network capacity.
Access Token Manipulation
How attackers manipulate access tokens to escalate privileges or impersonate users.
Incident Triage
How to prioritize and classify security incidents effectively.
Model Context Protocol (MCP)
What MCP is and how it enables AI models to integrate with external tools and systems.
Drive-By Attack
How compromised websites automatically infect users upon visiting them.
Family Emergency Scam
How scammers manipulate victims by pretending to be in family emergencies.
Google Dorking
How to use advanced search operators for OSINT investigations.
Evil Twin Attack
How attackers create fake WiFi hotspots to intercept traffic and credentials.
SPF
How SPF validates authorized email sending servers.
Real-Time Payment Systems BRE-B
How real-time payment systems work and the associated security risks.
Network Traffic Analysis
How to analyze network traffic to detect threats and anomalies.
Anatomy of a CVE
How CVE vulnerabilities are discovered, registered and exploited.
Computer Virus
How computer viruses operate and spread across systems.
Prompt Injection
How attackers manipulate prompts to alter the behavior of AI-based systems.
Trojan
How trojans trick users into installing malicious software disguised as legitimate.
Incident Response
Phases and procedures used to respond to cybersecurity incidents.
Newsletter
Get new infographics every month
We send one email per month with new infographics and cybersecurity trends. No spam, unsubscribe anytime.
Want to learn more?
Visit our academy for specialized cybersecurity training.
Go to AcademyRead the Blog