Offensive cyber tactics are the specific methods and approaches used by attackers to achieve their objectives within a target system or network. These tactics are often combined and adapted to the specific vulnerabilities and defenses of the target. Some common tactics include:
Exploiting Vulnerabilities #
This involves taking advantage of weaknesses in software, hardware, or network configurations. These vulnerabilities can be:
- Zero-day Exploits: Exploits that target vulnerabilities unknown to the vendor or the public. These are highly valuable and often reserved for high-priority targets due to their potency and the difficulty of detection.
- N-day Exploits: Exploits that target known vulnerabilities for which patches may or may not be available. Attackers often race to exploit these vulnerabilities before organizations can apply patches.
- Misconfigurations: Exploiting systems that are not configured securely, such as default passwords, open ports, or unnecessary services.
Social Engineering #
Manipulating individuals to gain access to systems or information. This tactic preys on human psychology and trust. Common social engineering techniques include:
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
