Glossary

What is SQL Injection? A code injection attack that allows attackers to interfere with the queries that an application makes to its database. Expanded Explanation SQL Injection occurs when malicious SQL statements are inserted into a form input or URL …

What is Subdomain Enumeration? The process of identifying subdomains associated with a main domain to map attack surfaces. Expanded Explanation Subdomains may reveal development environments, staging servers, or APIs. Tools like Sublist3r, Amass, and crt.sh are frequently used in OSINT …

What is Surveillance Tools? Software or devices used to monitor activity. Expanded Explanation Surveillance tools are technologies used to observe and track digital or physical behavior. These tools can be used by security teams for lawful monitoring or misused by …

What is Synack? A hybrid bug bounty platform that combines vetted researchers with controlled testing environments. Expanded Explanation Synack differs from traditional platforms by offering a Red Team-as-a-Service model. It uses a curated network of ethical hackers under strict rules …

What is a Threat Any circumstance or event with the potential to adversely affect information systems through unauthorized access, destruction, or disclosure. Expanded Explanation Threats can be internal or external, intentional or accidental. Examples include malware, phishing, natural disasters, or …

What is a Threat Actor An entity that is responsible for an event that could impact cybersecurity. Expanded Explanation Threat actors can be individuals, groups, or even nation-states. Their motivations range from financial gain and political objectives to ideological reasons. …