Free Resources

Free knowledge

90+ free cybersecurity infographics for the entire community. No forms to download. Just shared knowledge.

98 of 98 resources

🕵️Methodologies, Attack Anatomy

Browser Fingerprinting

How websites identify users using browser fingerprinting techniques.

#Privacy#Tracking#Fingerprinting

🔓Attack Anatomy, Attack Types

Active Directory Attack

Full anatomy of an attack against Active Directory environments, from reconnaissance to exfiltration.

#Kerberos#AD#RedTeam

🎭Attack Anatomy, Attack Types

Adversary-in-the-Middle Attack

How attackers intercept sessions and credentials using AITM attacks.

#AITM#SessionHijacking

Attack Anatomy, Web Attacks, Attack Types

API Attack

Common attack vectors targeting modern APIs and REST services.

#OWASPAPI#REST

🌐Attack Anatomy, Web Attacks, Attack Types

Web Application Attack

Anatomy of common attacks against modern web applications.

#OWASP#WebSecurity

🎯Attack Anatomy, Attack Types

APT Attack

How advanced persistent threats operate inside organizations.

#APT#CyberThreat#NationState

Attack Anatomy, Web Attacks, Attack Types

BOLA Attack

How attackers exploit Broken Object Level Authorization vulnerabilities in APIs.

#OWASPAPI#BOLA#Authorization

Attack Anatomy, Attack Types

Kubernetes Attack

Threats and attack vectors against Kubernetes containers and clusters.

#Kubernetes#Containers#Cloud

☁️Attack Anatomy, Attack Types

Cloud Infrastructure Attack

Common attack vectors against AWS, Azure and GCP infrastructure.

#AWS#Azure#Cloud

📡Attack Anatomy, Attack Types

IoT Attack

How attackers compromise IoT devices and exploit connected networks.

#IoT#Embedded#Botnets

Attack Anatomy, Attack Types

Obfuscated JavaScript Attack

Evasion and concealment techniques using obfuscated JavaScript.

#JavaScript#Malware#Obfuscation

Attack Anatomy

JWT Attack

How attackers exploit JSON Web Token vulnerabilities to escalate privileges.

#OWASP#API#JWT

🎭Attack Anatomy, Attack Types, phishing

Reverse Proxy Phishing Attack

How attackers use reverse proxies to capture credentials and MFA sessions.

#Phishing#ReverseProxy#MFA

📦Attack Anatomy, Attack Types

Supply Chain Attack

How attackers compromise vendors, libraries and CI/CD pipelines to distribute malware.

#SupplyChain#CI/CD#DevSecOps

🪲Attack Anatomy

Anatomy of a CVE

How CVE vulnerabilities are discovered, registered and exploited.

#CVE#Vulnerabilities#Exploit

Attack Anatomy, Attack Types

Microservices Attack

Common attack vectors against microservices-based architectures.

#Microservices#API#Cloud

Attack Types

EDR/XDR Bypass

Techniques used to evade modern EDR and XDR solutions.

#EDR#XDR#Evasion

🖥Attack Types

Command and Control Attack

How C2 channels used by malware and threat actors operate.

#C2#Malware#Botnet

Attack Types

MFA Fatigue Attack

How attackers abuse MFA notifications to trick users into granting access.

#MFA#Identity#PushBombing

🧠Attack Types

Social Engineering Attack

Psychological manipulation techniques used to gain unauthorized access.

#SocialEngineering#HumanHacking#Phishing

🔑Attack Types

Password Cracking

Methods used to crack passwords using brute force, dictionaries and hybrid attacks.

#Passwords#BruteForce#Hashcat

🌐Attack Types

Phishing Through Fraudulent Domains

How attackers use fake domains to impersonate brands and steal credentials.

#Phishing#Domains#Typosquatting

🎣Attack Types

Phishing Attack

How phishing attacks work and the most common techniques used to deceive users.

#Phishing#CredentialTheft#EmailSecurity

🤖Attack Types, AI & Emerging

Prompt Injection

How attackers manipulate prompts to alter the behavior of AI-based systems.

#AISecurity#LLM#PromptInjection

🌍Network Attacks, Attack Types

BGP Hijacking Attack

How attackers manipulate BGP routes to redirect or intercept internet traffic.

#BGP#Routing#NetworkSecurity

Network Attacks, Attack Types

NTP Amplification DDoS

How DDoS attacks using amplification through NTP servers work.

#DDoS#NTP#Amplification

🔁Network Attacks, Attack Types

Reflection Amplification DDoS

DDoS attacks based on reflection and amplification using exposed services.

#DDoS#Reflection#Amplification

🕸️Network Attacks, Attack Types

Botnet DDoS Attack

How botnets are used to perform distributed denial-of-service attacks.

#Botnet#DDoS#Malware

🌐Network Attacks, Attack Types

HTTP Flood DDoS Attack

How DDoS attacks targeting applications and HTTP servers work.

#HTTPFlood#Layer7#DDoS

📡network, Attack Types, ddos

DNS Flood DDoS Attack

How attackers overwhelm DNS services using flood-based attacks.

#DNS#DDoS#Flood

💥Network Attacks, Attack Types

Memcached DDoS Attack

DDoS amplification attacks using exposed Memcached servers.

#Memcached#Amplification#DDoS

🐢Network Attacks, Attack Types

Slowloris Attack

How Slowloris exhausts HTTP connections by keeping them open as long as possible.

#Slowloris#HTTP#DDoS

Network Attacks, Attack Types

SSDP Amplification Attack

How attackers use UPnP/SSDP devices to amplify DDoS traffic.

#SSDP#UPnP#Amplification

Network Attacks, Attack Types

TCP SYN Flood Attack

How SYN Flood attacks exhaust resources by overwhelming TCP connections.

#TCP#SYNFlood#DDoS

🌐Network Attacks, Attack Types

Volumetric DDoS Attack

DDoS attacks designed to saturate bandwidth and network capacity.

#Volumetric#Bandwidth#DDoS

Network Attacks, Attack Types

DNS Cache Poisoning Attack

How attackers manipulate DNS responses to redirect users to malicious websites.

#DNS#Poisoning#Spoofing

Network Attacks, Attack Types

Evil Twin Attack

How attackers create fake WiFi hotspots to intercept traffic and credentials.

#WiFi#EvilTwin#MITM

🖧Network Attacks, Attack Types

MAC Flooding Attack

How attackers overflow switch CAM tables to capture network traffic.

#Switching#LAN#MACFlooding

🎭network attacks , Attack Types

Man-in-the-Middle Attack

How attackers intercept and manipulate communications between two parties.

#MITM#Interception#Network

👂Network Attacks, Attack Types

Sniffing Attack

How attackers capture and analyze network traffic to obtain sensitive information.

#Sniffing#Packets#TrafficAnalysis

🚨Attack Types

Signs of a Phishing Email

Common indicators used to identify phishing emails.

#Phishing#EmailSecurity#Awareness

Attack Types

MFA Synchronization Attack

How attackers exploit MFA synchronization mechanisms to gain unauthorized access.

#MFA#Identity#Authentication

🕳️Attack Types

Watering Hole Attack

How attackers compromise websites frequented by targets to distribute malware.

#WateringHole#Compromise

💉Web Attacks, Attack Types

Cross-Site Scripting (XSS)

How attackers inject malicious scripts into vulnerable web applications.

#XSS#JavaScript#OWASP

🪞Web Attacks, Attack Types

Reflected XSS Attack

How reflected Cross-Site Scripting works and its most common vectors.

#ReflectedXSS#OWASP#Injection

Web Attacks, Attack Types

Drive-By Attack

How compromised websites automatically infect users upon visiting them.

#Drive-By#BrowserExploit#WebSecurity

Web Attacks, Attack Types

HTTP Request Smuggling

How HTTP inconsistencies allow attackers to manipulate proxies and backend servers.

#HTTP#Smuggling#OWASP

Web Attacks, Attack Types

IDOR Attack

How attackers exploit insecure direct object references in web applications.

#IDOR#OWASP#Authorization

Web Attacks, Attack Types

SQL Injection Attack

How attackers inject malicious SQL queries to compromise databases.

#SQLInjection#Databases#OWASP

🎟️Web Attacks, Attack Types

Access Token Manipulation

How attackers manipulate access tokens to escalate privileges or impersonate users.

#OAuth#Tokens#Authentication

Web Attacks, Attack Types

Server-Side Request Forgery

How attackers force servers to make malicious internal or external requests.

#SSRF#Cloud#OWASP

Web Attacks, Attack Types

Subdomain Takeover Attack

How misconfigured subdomains can be hijacked by attackers.

#SubdomainTakeover#DNS#WebSecurity

💳AI & Emerging

Real-Time Payment Systems BRE-B

How real-time payment systems work and the associated security risks.

#Fintech#Payments#Banking

🔵Red/Blue/Purple

Blue Team

Roles and responsibilities of Blue Team cybersecurity professionals.

#BlueTeam#SOC#Defense

🟣Red/Blue/Purple

Purple Team

How Purple Teams integrate offensive and defensive cybersecurity capabilities.

#PurpleTeam#Collaboration#SecurityTesting

🔴Red/Blue/Purple

Red Team

Functions and methodologies used by Red Teams to simulate real-world attacks.

#RedTeam#Pentesting#OffensiveSecurity

🛒Fraud

Fake Online Shopping Fraud

How online shopping frauds operate through fake stores and deceptive offers.

#Fraud#E-commerce#Scams

📞Fraud

Family Emergency Scam

How scammers manipulate victims by pretending to be in family emergencies.

#Fraud#Scam#SocialEngineering

☎️Fraud

Wangiri Scam

How fraudulent missed-call scams known as Wangiri operate.

#Wangiri#PhoneScam#Fraud

💸Fraud

Fast Loan App Fraud

How fraudulent quick-loan apps extort users and steal personal information.

#Fraud#MobileApps#Scam

🤖AI & Emerging, Attack Types, Fraud

AI-Powered Cybercrime

How cybercriminals use artificial intelligence to automate attacks and fraud.

#AI#Cybercrime#Automation

🧠AI & Emerging

Model Context Protocol (MCP)

What MCP is and how it enables AI models to integrate with external tools and systems.

#AI#MCP#LLM

🧠AI & Emerging

AI Systems

Architecture and operation of modern artificial intelligence systems.

#AI#MachineLearning#LLM

👻Malware & Endpoints

Fileless Malware

How fileless malware operates in memory to evade traditional detection mechanisms.

#Fileless#Malware#Evasion

🪱Malware & Endpoints

Computer Worms

How worms automatically spread across networks and vulnerable systems.

#Worm#Propagation#Malware

🛠️Malware & Endpoints

Living Off The Land

How attackers use legitimate system tools to avoid detection.

#LOTL#Evasion#Windows

💰Malware & Endpoints

Ransomware

How ransomware attacks operate through encryption and extortion phases.

#Ransomware#Extortion#Encryption

🕳️Malware & Endpoints

Rootkit

How rootkits hide malicious processes and maintain persistence on compromised systems.

#Rootkit#Persistence#Kernel

🕵️Malware & Endpoints

Spyware

How spyware collects sensitive information and monitors user activity.

#Spyware#Surveillance#Privacy

🐴Malware & Endpoints

Trojan

How trojans trick users into installing malicious software disguised as legitimate.

#Trojan#Malware#SocialEngineering

📄Malware & Endpoints

Macro Virus

How Office documents with malicious macros are used to distribute malware.

#Macros#Office#Malware

🦠Malware & Endpoints

Computer Virus

How computer viruses operate and spread across systems.

#Virus#Malware#Propagation

🔬Methodologies, Malware & Endpoints

Malware Analysis

Methodologies and techniques used to analyze malware samples.

#MalwareAnalysis#ReverseEngineering#ThreatIntelligence

🦈Methodologies, Network Attacks

Wireshark Traffic Analysis

How to use Wireshark to capture and analyze network traffic.

#Wireshark#Packets#TrafficAnalysis

📡Methodologies, Network Attacks

Network Traffic Analysis

How to analyze network traffic to detect threats and anomalies.

#TrafficAnalysis#NetworkMonitoring#Detection

🔨Methodologies, Attack Types

Brute Force Attack

How brute force attacks against credentials and systems operate.

#BruteForce#Passwords#Authentication

🐞Methodologies, Attack Types

Bug Bounty Hunting

Methodologies used to find vulnerabilities in Bug Bounty programs.

#BugBounty#Hacking#Vulnerabilities

♻️Methodologies, Attack Types

Exploitation Cycle

Common phases attackers use to compromise systems and maintain access.

#Exploitation#KillChain#Attacks

🎯Methodologies

MITRE ATT&CK

MITRE ATT&CK framework for classifying adversary tactics and techniques.

#MITRE#ATT&CK#ThreatIntelligence

🚑Methodologies

Incident Triage

How to prioritize and classify security incidents effectively.

#IncidentResponse#SOC#Triage

⚙️Methodologies, Process

DevSecOps Process

How to integrate security into CI/CD pipelines and DevOps processes.

#DevSecOps#CI/CD#ShiftLeft

🔎Methodologies

Google Dorking

How to use advanced search operators for OSINT investigations.

#GoogleDorking#OSINT#Reconnaissance

Methodologies

Digital Forensics

Methodologies used to collect and analyze digital evidence.

#Forensics#IncidentResponse#Evidence

🕵️Methodologies

OSINT

How to gather intelligence using open-source intelligence techniques.

#OSINT#Recon#Intelligence

🧑‍💻Methodologies

Pentesting

Methodologies and phases used in offensive penetration testing.

#Pentesting#RedTeam#OffensiveSecurity

🐧Methodologies, Attack Types

Linux Privilege Escalation

How attackers escalate privileges on Linux systems using insecure configurations and vulnerabilities.

#Linux#PrivilegeEscalation#PostExploitation

🔥Process

Firewall Rule Management

Process for securely managing, auditing, and optimizing firewall rules.

#Firewall#NetworkSecurity#Governance

🚨Process

Incident Response

Phases and procedures used to respond to cybersecurity incidents.

#IncidentResponse#SOC#Containment

🎯Process

Threat Hunting

How analysts proactively search for advanced threats inside organizations.

#ThreatHunting#Detection#SOC

🔐Process

Continuous Zero Trust Verification

How Zero Trust continuously validates identities, devices, and access.

#ZeroTrust#Identity#AccessControl

🔑Digital Security

Almost Impossible Password

Best practices for creating strong passwords resistant to attacks.

#Passwords#Authentication#SecurityAwareness

📧Digital Security

DKIM

How DKIM protects emails using cryptographic signatures.

#DKIM#EmailSecurity#Authentication

🛡️Digital Security

DMARC

How DMARC helps prevent email spoofing and phishing.

#DMARC#Phishing#EmailSecurity

✉️Digital Security

SPF

How SPF validates authorized email sending servers.

#SPF#EmailSecurity#DNS

🔐Digital Security

Multi-Factor Authentication

How MFA strengthens authentication using multiple verification factors.

#MFA#Authentication#Identity

🔑Digital Security

SSO and SAML

How SSO and SAML work to centralize authentication and access management.

#SSO#SAML#Identity

🌐Digital Security

VPN

How VPNs protect communications and privacy over public networks.

#VPN#Privacy#Encryption

Methodologies

Firewall Evasion Methodology

Methodologies and techniques used to evade firewall controls and network restrictions.

#Firewall#Evasion#NetworkSecurity

Want to learn more?

Visit our academy for specialized cybersecurity training.