Social engineering attacks

• Phishing
• Spear phishing
• Whaling
• Vishing
• Tailgating
• Impersonation
• Dumpster diving
• Shoulder surfing
• Hoax
• Watering hole attack
• Authority
• Intimidation
• Consensus
• Scarcity
• Familiarity
• Trust
• Urgency

---

Application/service attacks

• DoS
• DDoS
• Man-in-the-middle
• Buffer overflow
• Man-in-the-middle
• Buffer overflow
• Injection
• Cross-site scripting
• Cross-site request forgery
• Privilege escalation
• ARP poisoning
• Amplification
• DNS poisoning
• Domain hijacking
• Man-in-the-browser
• Zero day
• Replay
• Pass the hash
• Hijacking and related attacks
• Driver manipulation
• MAC spoofing
• IP spoofing

---

Wireless attacks

• Replay
• IV
• Evil twin
• Rogue AP
• Jamming
• WPS
• Bluejacking
• Bluesnarfing
• RFID
• NFC
• Disassociation

---

Cryptographic attacks

• Birthday
• Known plain text/ cipher text
• Rainbow tables
• Dictionary
• Brute force
• Collision Downgrade
• Replay/playback
• Weak implementations